Follow the story

Apple

Apple security: macOS malware, browser vulnerabilities and attacks on Apple devices and development tools. Compare the affected products, updates and reported evidence.

Latest report:

19articles
5Reports in the past 30 days
29CVEs covered

Matching reports 19

  1. Malware

    Fake Zoom Installer Uses CloudSyncD to Establish Persistent Access on Macs

    Fake Zoom installer tricks Mac users into granting root access to install CloudSyncD backdoor for persistent control and follow-on payloads.

  2. AI

    Apple Plans a More Deliberate Consent Step for Mac’s Full Disk Access

    Apple plans explicit consent for Mac Full Disk Access amid AI agent risks, covering files, mail and messages; no timeline or macOS version yet.

  3. Vulnerabilities

    Public CoreGraphics PoC Raises Pressure to Patch Apple Devices Under Targeted Attack

    Public PoC for CVE-2026-86950 confirms CoreGraphics font crash, raising pressure to patch iOS 26.7.1 and macOS amid targeted attacks.

  4. Vulnerabilities

    Apple Closes CoreGraphics Memory Flaw Linked to Precision iPhone Attacks

    Apple patched CVE-2026-86950, a CoreGraphics out-of-bounds flaw enabling code execution in targeted iPhone attacks. Update iOS 26.7.1 and macOS now.

  5. Malware

    PamStealer Makes macOS Payload Recovery Depend on Its Command Server

    New PamStealer macOS variant uses fake Wavel wallet, JXA-to-zsh chain and server-side X25519 decryption to deliver Swift password stealer.

  6. Vulnerabilities

    WeChat Zero-Click Worm Hijacked Accounts Through Incoming Calls

    A zero-click WeChat flaw let contacts hijack accounts via incoming calls and spread as a worm. Fixed in August updates with server-side blocking.

  7. Malware

    Pegasus Hits Serbia’s Student Movement with a Zero-Click iMessage Exploit

    Citizen Lab confirmed Pegasus zero-click iMessage compromise of Serbian student activist's iPhone, amid 14 spyware targets and NoviSpy Android cases.

  8. AI

    AnonyMousKIT, the Phishing-as-a-Service Using AI Voices to Steal iPhone Passcodes

    SOCRadar reveals AnonyMousKIT, a PhaaS using AI voices to phish iPhone owners for passcodes, bypassing Activation Lock and stealing data.

  9. Vulnerabilities

    Four Critical Vulnerabilities Exploited Against macOS, SharePoint, VMware vCenter, and Windows

    CISA has added four actively exploited critical vulnerabilities to its Known Exploited Vulnerabilities KEV catalog. The flaws affect Apple macOS,

  10. AI

    Camera-Equipped AirPods: macOS Tahoe Demo Revives Privacy Concerns

    A short video demo included in the macOS Tahoe 26.7 Release Candidate may have shown future camera-equipped AirPods for the first time. MacRumors spotted

  11. Vulnerabilities

    Apple Updates macOS, iOS, and iPadOS: Dozens of WebKit, Kernel, and Networking Flaws Fixed

    Apple patches critical flaws in macOS, iOS, iPadOS addressing WebKit, kernel, and networking issues to prevent crashes and data leaks.

  12. Malware

    AmnesiaStealer Turns the macOS Browser into a Remotely Controlled Session

    On August 14, 2026, Jamf Threat Labs reported AmnesiaStealer, a new Rust-based infostealer designed to target macOS users. The observed distribution

How this coverage is selected

Articles are selected by explicit entity names or reviewed aliases in their original headlines, within the last 365 days. This is a chronology of our reporting, not a complete incident history. Separate stories do not imply a shared attack campaign. Read each article for its sources, affected versions and uncertainties.