A new investigation into Claude Code security risk has sparked debate across the cybersecurity community after … Claude Code Activity Raises Security Concerns After Reverse Tunnel and Persistence DiscoveryRead more
macOS security
SHub Reaper Malware Targets Mac Users and Crypto Wallets
A dangerous new variant of macOS infostealer malware, known as SHub Reaper malware, is targeting Apple … SHub Reaper Malware Targets Mac Users and Crypto WalletsRead more
InvisibleFerret Malware Now Ships as Compiled .pyd and .so Files to Evade Script Detection
The North Korea-linked threat actor known as Void Dokkaebi (also tracked as Famous Chollima) has quietly … InvisibleFerret Malware Now Ships as Compiled .pyd and .so Files to Evade Script DetectionRead more
3 Ways New VMware Hack Steals Your Private Mac Data
On May 14, 2026, Broadcom dropped an emergency security advisory (VMSA-2026-0003) resolving a high-severity privilege escalation … 3 Ways New VMware Hack Steals Your Private Mac DataRead more
macOS ClickFix Malware: Fake Fixes Hiding Infostealers
Imagine searching online for a quick fix to a common macOS issue—like low disk space—and finding … macOS ClickFix Malware: Fake Fixes Hiding InfostealersRead more
Fake Notepad++ for Mac Website: A Growing Malware Threat
A seemingly harmless search for a trusted code editor on macOS has turned into a serious … Fake Notepad++ for Mac Website: A Growing Malware ThreatRead more
Design as a Weapon: macOS ‘textutil’ and KeePassXC Exposed as Automation Attack Primitives
In modern DevOps and CI/CD, there is a dangerous assumption: if a tool is local, mature, … Design as a Weapon: macOS ‘textutil’ and KeePassXC Exposed as Automation Attack PrimitivesRead more
The AI Privacy Alarm: Claude Desktop’s Silent Manifest Deployment
In the race to build “agentic” AI—tools that can act on your behalf across digital environments—transparency … The AI Privacy Alarm: Claude Desktop’s Silent Manifest DeploymentRead more
Sapphire Sleet macOS Attack Uses Social Engineering
Not every cyberattack needs a zero-day exploit to succeed. A recent campaign by Sapphire Sleet proves … Sapphire Sleet macOS Attack Uses Social EngineeringRead more
iTerm2 RCE Vulnerability: When Text Output Becomes Code Execution
What if simply viewing a text file could execute malicious code on your machine? That’s exactly … iTerm2 RCE Vulnerability: When Text Output Becomes Code ExecutionRead more