Show HN tool auto-dismisses macOS local-network prompts
The Hacker News post only shows the project title, with 42 points and 35 comments.
The Hacker News post only shows the project title, with 42 points and 35 comments.
SANS could not retrieve the Windows or macOS payload after test fetches returned HTTP 403 or failed to resolve.
Affected builds are those before the stated iOS, iPadOS, macOS, visionOS, tvOS, watchOS and Safari releases.
macOS 27.2, released October 26, left git, curl, and python3 trusting the certificates and undid manual workarounds.
CVE-2026-112656 is scored CVSS 3.3 and requires opening a malicious page or file.
iOS and iPadOS 18.7.11 carry the CVE-2026-86950 fix; Apple says iOS and macOS 27 are not affected.
CVE-2026-86950, an out-of-bounds write, may have been used in targeted attacks on iOS before iOS 27.
Version 2 adds a WebSocket shell and LaunchAgent persistence while still stealing developer and wallet secrets.
Already exploited CoreGraphics flaw CVE-2026-86950 now gets iOS 18 fixes; no newly exploited bug is flagged.
Siri can recall past chats and use voicemails and Messages attachments, but stays unavailable in Europe and mainland China.
The listing only points to downloads and release notes, with no security content given.
ICMacOS now includes WebSocket remote commands and LaunchAgent persistence that survives reboots.
Apple is blocking certificates from six compromised eMudhra intermediate CAs that issue TLS certificates, with further updates for command-line tools.
The blocks ship in iOS 27, iPadOS 27, macOS 27, and visionOS 27 and stop pages from sending addresses to identity-resolution servers.
Non-extractable p-256-ne identities die with the Mac and must be re-registered, including on GitHub.
A Reddit user says the assistant saw about 1,175% CPU use and a LaunchAgent dated August 29; the report is unverified.
The feed entry names the build but does not list any security fixes.
The linked Apple forum post was behind a human-verification page, so the report body was unavailable.
GridSnap is an open-source Divvy-style window snapper for macOS.
Apple released macOS 27.2 beta 4 (build 26B5112a) to developers.
A designer archives how the Mac Dock looked from Mac OS X through macOS 27.
SOCRadar analyzes ICMacOS, macOS malware that evolved from an infostealer into a persistent RAT.
Hackers use Google Ads and Bing redirects to deliver fake Claude installers that run ClickFix commands.
Cisco Talos disclosed patched vulnerabilities in Adobe Photoshop, Apple macOS, Foxit Reader, and Microsoft Windows.
A Hacker News post criticizes Apple for blocking removal of on-device AI models in macOS 27.
Meta's Muse AI agent launched with message leaks, root-access tricks, and a reported Mac zero-day.
Apple will tighten macOS Full Disk Access controls as AI agents increasingly request broad access to private data.
Apple released macOS 27.2 beta 3 (build 26B5101f) with no security details in the notice.
Open-source RemoveMacAI turns off Apple Intelligence on macOS and deletes its on-disk models.
Unreleased Gemini Desktop Full Access could let the assistant control files, apps, and network activity on a Mac.
Open-source RemoveMacAI disables Apple Intelligence on macOS 27 and deletes on-device models.
Apple will tighten macOS Full Disk Access as autonomous AI agents raise privacy risks.
RemoveMacAI lets Mac users delete Apple Intelligence models and reclaim about 10–12GB without disabling System Integrity Protection.
RemoveMacAI disables Apple Intelligence on macOS 27 and deletes about 12 GB of on-device models.
Apple will tighten macOS Full Disk Access so users deliberately approve broad access as AI agents grow more capable.
Apple will tighten macOS Full Disk Access after AI agents risked exposing users' private data.
Attackers are exploiting macOS screen-sharing flaw CVE-2026-65400 on exposed port 5900 to install Monero miners.
Apple will require explicit macOS Full Disk Access grants as autonomous AI agents increase privacy risk.
A GitHub tool is presented to remove and disable Apple's macOS 27 AI models.
Show HN project SCM offers local AI search across macOS photos and every video frame.
Entities are extracted by the model from each article. First seen , last mentioned . Watching keeps it in this browser only (no account); the watchlist page and dashboard alerts use it.
Today 52 readers · 52 views · 43 reads · all time 158K views