The Meta Muse zero-day on macOS shows how a hijacked AI agent tool-execution path can turn into malware injection, so this post walks through auditing agent permissions, tool scopes, signed tool calls, and update channels before the next one lands.
A critical Docker Sandboxes vulnerability let malicious guest code running inside a container read and modify files on the macOS host, a reminder that local and CI containers should not be treated as trusted security boundaries.
A practical guide to auditing macOS Screen Sharing patch coverage after a cryptominer campaign, with steps to verify exposure, confirm remediation, and harden affected systems.
A technical breakdown of how AmnesiaStealer targets macOS users through GitHub supply chain abuse, remote browser control, and session hijacking tactics.
This post traces the MacSync Stealer campaign on macOS from a malicious Google ad impersonating Claude Code through payload delivery and data exfiltration, with practical defensive context for developers and security teams.
A deep technical walkthrough of the JINX-0164 LinkedIn-led infection chain, tracing how the threat actor delivers custom macOS malware, establishes persistence, and what defenders can inspect at each stage.