Threat Intelligence
An update on the macOS ClickFix threat: North Korean actors Sapphire Sleet and UNC1069 are now deploying AppleScript-based delivery chains and "Terminal-paste" lures to steal crypto-wallets and credentials from enterprise targets. SEOUL, SOUTH KOREA — The "ClickFix" social engineering phenomenon has officially evolved into a targeted nation-state
Vulnerabilities
iOS 18.7.8 fixes a notification retention flaw after the FBI used Cellebrite to extract cached Signal message previews from deleted iPhone apps in a high-profile Texas criminal case. CUPERTINO, CA — Apple has released a critical out-of-band security update — iOS 18.7.8 and iPadOS 26.4.2 — to
Vishing
Attackers are exploiting a loophole in Apple’s automated account recovery and security notification systems to bombard users with legitimate system alerts, driving them toward fraudulent support centers. CUPERTINO, CA — Security researchers from Malwarebytes and reports from the Apple user community have identified a sophisticated campaign that uses Apple’s