🧰 macOS

The items that name it 120

• Binance’s $6.3 Billion Hack Puts Developer Machine Security in Focus
  articleas affected products2026-10-30It is written here as macOS (Nx Console persistent Python backdoor; contributor's MacBook in OVHcloud incident).

  Nx Console persistent Python backdoor; contributor's MacBook in OVHcloud incident

• 4 real? Tracking exploitation and patching of eMudhra’s weak keys
  writeupas classification.technologies2026-10-30
• Malicious Claude Code extension on Cursor planted SSH backdoors
  articleas affected products2026-10-30

  Apple

• Trojanized Claude Code Extension Plants an SSH Backdoor
  writeupas classification.technologies2026-10-30
• Trojanized Claude Code Extension Delivered Persistent SSH Backdoor to Developer Machines
  writeupas affected products2026-10-30
• Cursor Removes Malicious Claude Code 2.1.313 Extension From Its Marketplace
  articleas affected products2026-10-30
• TeamViewer Flaw Could Let Malicious Hosts Take Over Support Technicians’ Machines
  articleas classification.technologies2026-10-30
• Backdoor in Claude Code for VS Code extension on the Cursor Marketplace
  writeupas affected products2026-10-30
• Show HN: Auto Dismiss Mac OS "Allow <app> to find devices on local networks?"
  repoas classification.technologies2026-10-29
• iOS, macOS 27.2 Patch 286 Bugs; Fix for Exploited Flaw Backported to iOS 18
  articleas classification.technologies2026-10-27
• Dead Popcorn Time Updater Put Millions of Computers at Risk of Takeover
  articleas classification.technologies2026-10-27
• eMudhra, Brotli, and the Long Tail of a Security Fix
  articleas classification.technologies2026-10-26
• In Other News: Tor Exit Relays Hijacked, Banks Spot Rogue AI Agents, Self-Rebuilding macOS Ransomware
  articleas affected products2026-10-23It is written here as macOS (Heartbreaker ransomware target).

  Heartbreaker ransomware target

• x86rc/unthemidator
  repoas classification.technologies2026-10-23
• eMudhra CA compromise: eight private keys, and one of them is 4
  articleas classification.technologies2026-10-22
• Amazon-Themed ClickFix Campaign Serves Up Finger-Licking Malware
  writeupas affected products2026-10-21It is written here as macOS (alternate Terminal script instructions via User-Agent check; destination URL offline during research).

  alternate Terminal script instructions via User-Agent check; destination URL offline during research

• Digital Forensics: Analyzing Systems with Live-Forensicator
  articleas classification.technologies2026-10-20
• Hackers abuse Google Ads, Bing redirects to push Claude ClickFix attacks
  articleas classification.technologies2026-10-10
• Malicious npm Campaign “MALFEX” Delivers RAT and Stealer via Eight Packages with 40,000+ Downloads
  articleas affected products2026-10-08

  Not affected; payloads silently fail on this platform

• Microsoft, Adobe, Apple, and Foxit vulnerabilities
  advisoryas classification.technologies2026-10-07
• Chrome 155 Update Patches 247 Vulnerabilities
  articleas classification.technologies2026-10-07
• | Blog | Endor Labs
  articleas affected products2026-10-06

  platform using Apple's Seatbelt for sandbox enforcement

• Pentesting: Managing Compromised Machines with Platypus
  writeupas affected products2026-10-02
• The OpenSourceMalware Show #23
  talkas classification.technologies2026-10-02
• Meta Pushes Back on Claim That Muse AI Read a User's Messages Without Consent
  articleas classification.technologies2026-10-01
• Unsurprisingly, Meta's new Muse AI agent blatantly ignores users permissions
  articleas classification.technologies2026-09-29
• AI Agent Sandbox Flaw in brig: Symlink Traversal (CVSS 8.2) | Blog | Endor Labs
  writeupas affected products2026-09-28

  confirmed affected configuration, brig 0.2.0 from Homebrew on the hull backend over Virtualization.framework

• Should you care about an “AI slowdown?”
  articleas affected products2026-09-17

  Apple patched approximately 100 of ~200 total resolved security defects affecting both iOS and macOS; fixes target components including AppleKeyStore, Authentication Services, Foundation, Safe Browsing, Sandbox, Security, TCC, and WebKit.

• WeaselBiscuit Strips BeaverTail and OtterCookie Down to Essentials
  writeupas affected products2026-09-17

  Targeted for Chrome extension storage theft and clipboard capture (pbpaste)

• The OpenSourceMalware Show #21
  talkas classification.technologies2026-09-17
• The Apple Security Update Review for September 2026
  articleas classification.technologies2026-09-16
• Living Inside the Shell: zsh Modules on macOS
  writeupas affected products2026-09-16

  Uses zsh as the default interactive shell; zsh module system (zmodload) can be abused to perform networking, file manipulation, and extended-attribute operations from within the existing /bin/zsh process, reducing process-execution telemetry.

• ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell
  writeupas classification.technologies2026-09-15
• Google Doc Sidebar Sends Mac and Windows Users Down Different Paths to Malware
  writeupas affected products2026-09-15

  Targeted via ClickFix zsh commands or manual DMG download delivering AMOS stealer

• Compromised Flutter package on pub.dev contains XCSSET malware
  writeupas classification.technologies2026-09-08
• The React Native Developer's Security Guide
  repoas affected products2026-09-05It is written here as macOS (React Native developer workstations).

  React Native developer workstations

• Numbat
  repoas affected products2026-09-05

  amd64/arm64, single-binary numbat distribution

• Socket: FUNNULL iOS Spyware Campaign via 13 Malicious Packagist Themes
  writeupas affected products2026-09-01

  Kernel escape stage was already addressed in macOS 26.1 per Apple Product Security

• age
  repoas affected products2026-08-31

  supported platform for pre-built age binaries

• Dev Machine Guard Now Inventories Where Developer Credentials Live
  articleas affected products2026-08-28It is written here as macOS (TCC-protected paths).

  Several credential locations sit in TCC-protected paths, requiring Full Disk Access for the agent to get complete results

• The AI Attack Surface: How Threat Actors Abuse Trusted AI Platforms
  writeupas affected products2026-08-27

  Targeted platform in the claude.ai/share Apple Support lure, the ChatGPT/Grok ClickFix campaign, and the OpenAI Codex download variant

• Rumour Is the Exploit — AI agents collapse time-to-exploit to near-zero
  articleas affected products2026-08-22

  Cited as a platform where CI/QC is harder to run than Linux.

• Going with the Flow(s): Distinct Clusters Target Individuals of Interest to Russia
  articleas affected products2026-08-20It is written here as macOS (ATOMIC target).

  ATOMIC target

• Popular Rust crates arrayref, append-only-vec, and internment compromised in Supply Chain Attack
  writeupas classification.technologies2026-08-20
• Post-DEF CON Phishing Uses Malicious Google Doc to Deliver Malware
  writeupas affected products2026-08-19

  Targeted via ClickFix-style curl command and GAPIUpdate.dmg disk image; Gatekeeper bypass instructed

• MacSync Stealer: How a Google Search for Claude Led to a macOS Infostealer
  writeupas affected products2026-08-17

  Target operating system for MacSync Stealer, exploiting TCC permissions (Full Disk Access, Screen Recording) and Keychain.

• Orca Security: Zoom Zero-Click RCE Flaws Allow Any Meeting Attendee to Compromise All Participants
  advisoryas classification.technologies2026-08-12
• Beyond Prompt Injection: Hacking Apple's Private Cloud Compute
  writeupas classification.technologies2026-08-10
• From Screen Share to Root Access: Breaking Down CVE-2026-43760 and CVE-2026-65400 on macOS
  writeupas classification.technologies2026-08-07
• Russian AI Slopsquatting Publishes 700+ Malicious NPM Packages
  writeupas affected products2026-08-06

  x64 and ARM64 (universal Mach-O), targeted via loader_mac/beacon_mac.bin payloads

• Mac Malware Drains Crypto Wallets Via Fake CAPTCHA Scam
  writeupas affected products2026-08-06

  Targeted via Mach-O executables; affects both ARM64 (e.g. Apple M2 CPUs) and 64-bit non-ARM processor architectures

• Introducing the Wiz Sensor for Developer Workstations to Protect Endpoints in the AI Era
  articleas affected products2026-08-03

  Platform for Wiz Sensor for Developer Workstations, Private Preview

• AgentHound
  repoas affected products2026-08-01

  amd64 or arm64, supported by shell installer

• Awesome Malware Analysis
  repoas affected products2026-07-31

  Target platform for mac-a-mal automated mac malware hunting framework and BlackLight forensics

• Ghidra
  repoas classification.technologies2026-07-31
• hackingtool
  repoas affected products2026-07-31

  supported platform, requires Python 3.10+

• Shift Left and Hunt Deep: Announcing Automated Exposure Discovery Engines for macOS XPC and Oracle Cloud IAM
  articleas affected products2026-07-30

  XPC applications exposing privileged (often root) background services that authorize callers only by code-signing identity (team ID / CDHash)

• Reverse Engineering the Six Stages of MacSync Stealer and RAT
  writeupas affected products2026-07-29

  Target platform for the entire MacSync intrusion chain, including TCC/Full Disk Access, Keychain, LaunchAgent persistence

• Socket: Distributed npm Package Cluster Delivers Cross-Platform RAT Targeting Alibaba Developers
  writeupas affected products2026-07-29

  Persistence via malicious script inserted into ~/.zshrc and a 10-minute Launch Agent

• User Accounts and Privilege Management
  articleas affected products2026-07-27It is written here as macOS (sudo).

  sudo

• Filesystems and File Permissions Explained
  articleas affected products2026-07-27It is written here as macOS (Apple File System, APFS).

  Apple File System, APFS

• Homebrew 6.0.0 security update
  articleas affected products2026-07-24

  initial support added; drops Intel support

• The OpenSourceMalware Show #14
  talkas affected products2026-07-23
• Beyond MCP: The New Security Playbook for Coding Agents | Blog | Endor Labs
  articleas affected products2026-07-21

  platform targeted by sandbox solutions using Seatbelt/sandbox-exec

• AI Security Briefing
  advisoryas classification.technologies2026-07-18
• jit
  repoas affected products2026-07-18

  JitPass requires macOS 14+ on Apple Silicon; Intel Macs require building the CLI from source

• Harden-Runner Block Mode Now Available for macOS and Windows GitHub-Hosted Runners
  articleas classification.technologies2026-07-16
• Destructive Command Guard (dcg)
  repoas affected products2026-07-15

  Supported OS platform

• jscrambler npm package publishes malicious preinstall binary
  writeupas affected products2026-07-12

  Targeted by Mach-O arm64 native binary payload using sysctl/sysctlbyname anti-debug checks

• jscrambler npm Package Compromised in Supply Chain Attack
  writeupas affected products2026-07-11It is written here as macOS (Apple Silicon arm64).

  Targeted by dropped Mach-O native binary payload

• ZX41R/awesome-reverse-engineering-and-malware-analysis
  repoas affected products2026-07-06

  OS internals track

• prempti
  repoas affected products2026-07-04

  supported install target (.pkg installer); binaries not code-signed, may be blocked by Gatekeeper

• Malwoverview 8.0.5
  repoas affected products2026-06-28It is written here as macOS (platform Malwoverview is tested on).

  platform Malwoverview is tested on

• Trust No One: Automating macOS Privilege Escalation at Scale
  writeupas affected products2026-06-24

  Platform affected by XPC trust boundary flaw allowing CDHash cache exploitation and NIB payload injection; mitigation API xpc_connection_set_peer_code_signing_requirement() introduced in macOS 13

• macOS.Gaslight | Rust Backdoor Turns Prompt Injection on the Analyst, Not the Sandbox
  writeupas affected products2026-06-23

  Target platform of the macOS.Gaslight implant; sample identifier endpoint-macos-aarch64-5555494492fc075f441637fb9d894913dde3a2ea, ad hoc signed

• Reverse-Skill
  repoas affected products2026-06-21

  supported platform, see docs/platforms/macos.md

• Socket: 141 Mastra npm Packages Compromised via Typosquatted Dependency
  writeupas affected products2026-06-20
• Mastra Attack Targets Crypto, Password Managers, Authenticators, and Zapier
  writeupas affected products2026-06-18

  Platform targeted by implant persistence via LaunchAgent com.nvm.protocal.plist

• Deceptive Installers: How Fake Apps Target macOS
  writeupas affected products2026-06-10

  Target platform for deceptive installer infostealer campaigns; over 65% of newly reported macOS malware in 2025 classified as infostealers

• portbuster1337/ArachneC2
  repoas affected products2026-06-05

  supported implant/operator platform

• Secret Scanning Dev Workstations with bagel + Fleet
  writeupas classification.technologies2026-06-04
• Nx Console VS Code Extension Compromised
  writeupas affected products2026-06-02

  persistent Python backdoor and LaunchAgent installed

• Dev Machine Guard Now Scans Extensions Across Every Modern IDE
  articleas affected products2026-06-02

  Platform on which IDE extension scanning works identically

• Threat Actor Targets Crypto Organizations | Wiz Blog
  writeupas affected products2026-05-27

  Sole platform targeted by observed JINX-0164 malware (AUDIOFIX and MINIRAT), compiled for both Intel and Apple Silicon (ARM64/x86_64)

• X Post by @ale_sp_brazil
  threadas affected products2026-05-14

  referenced via hashtag as a platform covered by ERS exploit development series

• Hack Skills
  repoas affected products2026-05-13
• paralax/SeldomMonster
  repoas classification.technologies2026-05-12
• PentHertz/LUKSbox
  repoas affected products2026-05-08

  LUKSbox mount support via FUSE-T

• IronCurtain: Secure AI Agent Runtime
  repoas affected products2026-05-07
• Social Engineering Leveled Up. Has Your Security Program?
  articleas affected products2026-05-01

  Users searching for routine fixes directed to fake ChatGPT/Grok support pages that executed malicious commands installing AMOS infostealer

• Attackers Didn’t Wait for AI. They Built Workflows Around It.
  articleas affected products2026-04-22

  Targeted via fake AI-generated disk cleanup instructions leading to credential exposure and persistent malware installation

• What a Fake Claude Download Says About Security Today
  writeupas affected products2026-04-09

  Keychain targeted by the malware to steal credentials

• Supply Chain Compromise of axios npm Package
  writeupas affected products2026-03-31

  Targeted via AppleScript dropper delivering Mach-O universal binary (x86_64 and ARM64)

• That “Friendly” Prompt is ClickFix
  articleas classification.technologies2026-03-25
• Something Phishy in the /tmp Folder
  writeupas affected products2026-03-18

  Targeted platform; user's Mac endpoint compromised via fake system prompt and infostealer malware.

• How Fake OpenClaw Installers Spread GhostSocks Malware
  writeupas affected products2026-03-04

  Platform targeted via bash one-liner deploying OpenClawBot Mach-O binary (AMOS variant), detected by XProtect.yara version 5329 rule MACOS.SOMA.CLBIFEA

• Introducing MacNoise!
  toolas affected products2026-02-26

  Target platform for MacNoise telemetry generation and EDR/SIEM/firewall detection validation

• Cross-Platform Unity in EDR
  articleas affected products2026-01-13

  Platform for Huntress Managed EDR for about a year; protected via Apple's Endpoint Security API and system extensions; ransomware threat comparatively low due to TCC and Gatekeeper protections

• iOS 26.2 fixes 20 security vulnerabilities, 2 actively exploited
  articleas classification.technologies2025-12-14
• AI-Poisoning & AMOS Stealer: The Biggest Mac Threat | Huntress
  writeupas affected products2025-12-09

  Targeted operating system; Gatekeeper does not inspect shell scripts/one-liners, allowing execution without prompts or warnings

• macOS Extended Attributes: Case Study
  writeupas affected products2025-02-15

  File system extended attributes (EAs) feature, including quarantine attribute for downloaded files

• Today I Learned - Zsh Sessions (even more Timestamps)
  writeupas classification.technologies2024-05-26
• Today I Learned - Zsh History Timestamps
  writeupas affected products2024-05-07

  uses Zsh as default shell, replacing Bash in macOS Catalina

• MacOS forensic I
  writeupas classification.technologies2020-11-22
• Exploit Reversing #10: iOS Security Research (Part 1)
  articleas affected products
• microsoft/mxc
  repoas affected products
• chainguard-dev/malcontent
  repoas affected products

  UNIX platform malcontent also analyzes, with good results

• target/strelka
  repoas affected products

  Client platform supported by Strelka (OS-native client application)

• Sigma r2026-07-01 — 20 new detection rules
  repoas affected products

  Local System Accounts Discovery rule reworked; OSAScript/AppleScript rules fixed with filters for OpenCode

• NVIDIA OpenShell — secure runtime for autonomous AI agent fleets
  repoas classification.technologies
• openrig — multi-agent Claude Code/Codex orchestration
  repoas affected products

  Supported platform

• Claude Desktop (macOS): malicious file in a Cowork folder could run commands on the host
  advisoryas classification.technologies
• SpecterOps/Blacklight — local AI agent attack surface mapping toolkit
  repoas affected products

  Platform target for Scout library, built via 'make -C blacklight-scout release-macos'

• Sandyaa — open-source autonomous code auditor that proves bugs with working exploit PoCs
  repoas affected products

  actively tested platform for Sandyaa

• Nearly 800 Malicious npm Packages Deliver Cross-Platform RAT and Infostealer
  articleas affected products

  Targeted by WEL1DROPPER payload pkg.dl.wel1.ru; LaunchAgent persistence, downloads /pkg/beacon_mac.bin

• Critical Cursor Flaws Could Let Prompt Injection Escape Sandbox and Run Commands
  articleas classification.technologies
• Breaking Claude Code Opus 5 Auto Mode · Embrace The Red
  writeupas affected products

  Platform of the decoy binary decoder-darwin included in the malicious ZIP archive

• agent-egress-bench
  repoas affected products

  supported for inspecting the corpus and validating saved artifacts, but cannot run the Pipelock reference lane

• sage — Agent Detection & Response (ADR) for AI coding agents
  repoas affected productsIt is written here as macOS (AMSI no-op).

  AMSI no-op

• Dev Machine Guard Now Supports Windows - StepSecurity
  articleas affected products

  Previously the only platform supported by Dev Machine Guard