Tag Apple

SpectralBlur: New macOS Backdoor Discovered in North Korean Cyber Attacks

Recent findings from cybersecurity researchers have unveiled a sophisticated macOS backdoor known as SpectralBlur, believed to be linked to a malware family associated with North Korean threat actors. This malware serves as a significant indicator of evolving tactics employed against macOS systems, particularly as these operate in sectors deemed high-value…

Read MoreSpectralBlur: New macOS Backdoor Discovered in North Korean Cyber Attacks

CISA Identifies 6 Vulnerabilities: Apple, Apache, Adobe, D-Link, and Joomla at Risk

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has recently included six new security vulnerabilities in its Known Exploited Vulnerabilities (KEV) catalog, citing clear indications of ongoing exploitation. This move emphasizes the necessity for organizations to remain vigilant and proactive in their cybersecurity measures. Among the newly flagged vulnerabilities is…

Read MoreCISA Identifies 6 Vulnerabilities: Apple, Apache, Adobe, D-Link, and Joomla at Risk

Doxers Impersonating Law Enforcement Are Deceiving Big Tech into Revealing Users’ Private Information

Incident of Impersonation Data Breach Raises Alarms Over Cybersecurity Risks On September 4, a privacy specialist at Charter Communications responded to an emergency data request from someone impersonating Officer Jason Corse of the Jacksonville Sheriff’s Office. Within minutes, sensitive personal information—including the name, home address, phone numbers, and email address…

Read MoreDoxers Impersonating Law Enforcement Are Deceiving Big Tech into Revealing Users’ Private Information

CISA Alerts on Ongoing Exploitation of Apple iOS and macOS Vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has announced the identification of a significant security flaw targeting the iOS, iPadOS, macOS, tvOS, and watchOS platforms. This vulnerability has been added to CISA’s Known Exploited Vulnerabilities (KEV) catalog, suggesting ongoing exploitation in the wild. Labeled as CVE-2022-48618 with a high…

Read MoreCISA Alerts on Ongoing Exploitation of Apple iOS and macOS Vulnerability

New Vulnerability in Hugging Face Poses Risk of Supply Chain Attacks on AI Models

Recent findings by cybersecurity researchers have unveiled vulnerabilities in the Hugging Face Safetensors conversion service, potentially allowing adversaries to hijack user-submitted machine learning models, effectively leveraging them for supply chain attacks. The implications of this discovery raise significant concerns for businesses relying on the Hugging Face platform for their machine…

Read MoreNew Vulnerability in Hugging Face Poses Risk of Supply Chain Attacks on AI Models

Urgent: Apple Releases Critical Updates to Address Actively Exploited Zero-Day Vulnerabilities

Apple Releases Critical Security Updates to Address Exploited Vulnerabilities Apple has issued new security updates aimed at mitigating significant flaws in its operating systems, including vulnerabilities that have reportedly been exploited in the wild. The updates come in response to the discovery of two critical memory corruption issues affecting the…

Read MoreUrgent: Apple Releases Critical Updates to Address Actively Exploited Zero-Day Vulnerabilities

New “GoFetch” Vulnerability in Apple M-Series Chips Exposes Sensitive Encryption Keys

A significant security vulnerability has been identified in Apple’s M-series chips, enabling potential attackers to extract cryptographic keys integral to secure data operations. Known as GoFetch, this flaw relates to a microarchitectural side-channel attack that exploits the data memory-dependent prefetcher (DMP), specifically targeting constant-time cryptography implementations to covertly access sensitive…

Read MoreNew “GoFetch” Vulnerability in Apple M-Series Chips Exposes Sensitive Encryption Keys

Critics Mock Microsoft for Warning That AI Feature Could Infect Devices and Steal Data

Cybersecurity Insights: User Awareness and System Vulnerabilities Recent discussions spotlight the ongoing challenges related to user prompts in cybersecurity protocols, which are often meant to safeguard individuals from malicious activities. While the intentions behind such alerts are commendable, their effectiveness largely hinges on users comprehending the warnings and exercising caution…

Read MoreCritics Mock Microsoft for Warning That AI Feature Could Infect Devices and Steal Data

Apple Issues Essential iOS and iPadOS Updates to Address VoiceOver Password Security Flaw

Apple Releases Critical Security Updates Addressing Password Vulnerabilities and Audio Privacy Issues Apple has recently issued important updates for iOS and iPadOS targeting two significant security vulnerabilities. One of these flaws has the potential to expose users’ saved passwords via the VoiceOver assistive technology, raising alarm among cybersecurity experts. The…

Read MoreApple Issues Essential iOS and iPadOS Updates to Address VoiceOver Password Security Flaw