Search: “macOS 26”

34 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 48 Malware 37 Exploit / PoC 34 Ransomware 26 Phishing & fraud 7 Threat actor 6 Data breach 5 AI safety & security 3 Industry 2 Tools 2 AI research 2 Advisory 2 Research 1 Policy & legal 1

SeverityAll critical 91 high 41 medium 33 low 7 info 5

Apple releases fix for iOS and macOS zero

The RecordDec 10, 00:00 UTC · Dec 10, 2022Exploit / PoC in the wildCVE-2021-30807 CVE-2021-1782 CVE-2021-1870+10 CVEs

macOS High Sierra is now available

Help Net SecuritySep 26, 00:00 UTC · Sep 26, 2017Exploit / PoC in the wildCVE-2026-87491

Apple fixed macOS flaw that could allow to bypass Gatekeeper feature

Security AffairsDec 26, 13:30 UTC · Dec 26, 2021Exploit / PoC CVE-2021-30853 CVE-2021-30657 CVE-2021-30892

Apple macOS High Sierra Exploit Lets Hackers Steal Keychain Passwords in Plaintext

The Hacker NewsSep 27, 03:26 UTC · Sep 27, 2017Exploit / PoC

Unsigned apps can dump full OS keychain, including plaintext passwords

Security AffairsOct 6, 08:34 UTC · Oct 6, 2017Exploit / PoC

Microsoft found Shrootless bug in macOS that could bypass SIP feature

Security AffairsOct 28, 22:44 UTC · Oct 28, 2021Exploit / PoC CVE-2021-30892

Tor Browser flaw leaks users’ real IP address

Help Net SecurityNov 6, 00:00 UTC · Nov 6, 2017Exploit / PoC in the wild

New Chrome Zero-Day (CVE-2026-2441) Under Active Attack — Patch Released

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2026Exploit / PoC in the wildCVE-2026-2441 CVE-2026-20700

Tor Project fixed TorMoil, a critical Tor Browser flaw that can leak users IP Address

Security AffairsNov 4, 09:33 UTC · Nov 4, 2017Exploit / PoC in the wild

Apple patches macOS zero-day exploited by malware for months (CVE-2021-30657)

Help Net SecurityApr 27, 00:00 UTC · Apr 27, 2021Exploit / PoC CVE-2021-30657

Urgent: Apple Issues Critical Updates for Actively Exploited Zero

The Hacker NewsMar 7, 05:42 UTC · Mar 7, 2024Exploit / PoC in the wildCVE-2024-23225 CVE-2024-23296 CVE-2024-23222+2 CVEs

The federal government’s cybersecurity policies are falling into place just in time to be stalled again

Cisco TalosJul 20, 18:00 UTC · Jul 20, 2023Exploit / PoC in the wildCVE-2023-37450

Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Other Devices

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2026Exploit / PoC in the wildCVE-2026-20700 CVE-2025-14174 CVE-2025-43529

Urgent: New Chrome Zero-Day Vulnerability Exploited in the Wild

The Hacker NewsDec 21, 12:00 UTC · Dec 21, 2023Exploit / PoC in the wildCVE-2023-7024 CVE-2023-2033 CVE-2023-2136+5 CVEs

ClawJacked flaw exposed OpenClaw users to data theft

Security AffairsMar 2, 09:42 UTC · Mar 2, 2026Exploit / PoC

Apple fixed first actively exploited zero

Security AffairsFeb 12, 10:50 UTC · Feb 12, 2026Exploit / PoC in the wildCVE-2026-20700 CVE-2025-14174 CVE-2025-43529

Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild

The Hacker NewsFeb 10, 14:22 UTC · Feb 10, 2026Exploit / PoC in the wildCVE-2025-43529 CVE-2025-14174 CVE-2025-24085+6 CVEs

U.S. CISA adds Apple and Gladinet CentreStack and Triofox flaws to its Known Exploited Vulnerabilities catalog

Security AffairsDec 15, 19:00 UTC · Dec 15, 2025Exploit / PoC in the wildCVE-2025-43529 CVE-2025-14611 CVE-2025-14174

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

CISA added four critical actively exploited flaws to KEV: macOS Screen Sharing, SharePoint, VMware vCenter, and Microsoft IKE, with APT and ransomware use.

CISA added CVE-2026-65400 (macOS Screen Sharing, CVSS 9.8), CVE-2026-55040 (SharePoint, CVSS 9.1), CVE-2026-59310 (VMware vCenter, CVSS 9.8) and CVE-2026-33824 (Microsoft IKE Service Extensions, CVSS 9.8) to the KEV catalog. The macOS flaw was abused to deliver a Monero miner, while the vCenter bug was exploited by a suspected China-nexus APT to install reverse_ssh backdoors and Babuk-derived ransomware across 361 victim IPs in 47 countries. Unit 42 linked CVE-2026-33824 to a Chinese-speaking actor running an AI-enabled campaign using DeepSeek. FCEB agencies must patch by August 21, 2026 under BOD 26-04.

The Hacker NewsAug 19, 15:26 UTC · 27d agoExploit / PoC in the wildCVE-2026-65400 CVE-2026-55040 CVE-2026-59310+1 CVEs

Apple fixes zero-day flaw exploited in targeted attacks (CVE-2026-20700)

Help Net SecurityFeb 12, 00:00 UTC · Feb 12, 2026Exploit / PoC CVE-2026-20700 CVE-2025-14174 CVE-2025-43529

CVE-2026-34908: Ubiquiti Networks UniFi OS Server access control ...

CVE-2026-34908, a CVSS 10.0 access-control bypass in Ubiquiti UniFi OS, was added to CISA's KEV catalog amid reported active exploitation.

CISA added CVE-2026-34908 to the Known Exploited Vulnerabilities catalog on June 23, 2026, with remediation due June 26 under BOD 26-04 guidance. The CVSS 10.0 improper access control flaw (CWE-284) in Ubiquiti UniFi OS allows unauthorized system changes without authentication. Multiple news reports referenced by the page describe the max-severity UniFi flaws being exploited in attacks, and an official patch is available.

Web discovery (articles for new exploits & KEV entries)Sep 8, 06:48 UTC · 8d agoExploit / PoC in the wildCVE-2026-34908

Search: “macOS 26”

Apple releases fix for iOS and macOS zero

macOS High Sierra is now available

Apple fixed macOS flaw that could allow to bypass Gatekeeper feature

Apple macOS High Sierra Exploit Lets Hackers Steal Keychain Passwords in Plaintext

Unsigned apps can dump full OS keychain, including plaintext passwords

Microsoft found Shrootless bug in macOS that could bypass SIP feature

Tor Browser flaw leaks users’ real IP address

New Chrome Zero-Day (CVE-2026-2441) Under Active Attack — Patch Released

Tor Project fixed TorMoil, a critical Tor Browser flaw that can leak users IP Address

Apple patches macOS zero-day exploited by malware for months (CVE-2021-30657)

Urgent: Apple Issues Critical Updates for Actively Exploited Zero

The federal government’s cybersecurity policies are falling into place just in time to be stalled again

Apple Fixes Exploited Zero-Day Affecting iOS, macOS, and Other Devices

Urgent: New Chrome Zero-Day Vulnerability Exploited in the Wild

ClawJacked flaw exposed OpenClaw users to data theft

Apple fixed first actively exploited zero

Apple Issues Security Updates After Two WebKit Flaws Found Exploited in the Wild

U.S. CISA adds Apple and Gladinet CentreStack and Triofox flaws to its Known Exploited Vulnerabilities catalog

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

Apple fixes zero-day flaw exploited in targeted attacks (CVE-2026-20700)

CVE-2026-34908: Ubiquiti Networks UniFi OS Server access control ...

Apple releases fixes for three WebKit zero

Experts warn of 5 new flaws in Google Chrome dubbed Magellan 2.0

Week in review: Windows zero-day exploit leaked, Patch Tuesday forecast

U.S. CISA adds Apple, Rockwell, and Hikvision flaws to its Known Exploited Vulnerabilities catalog

Critical Wing FTP Server vulnerability exploited in the wild (CVE-2025-47812)

From summer camp to grind season

Researchers Uncover Government-Sponsored Mobile Hacking Group Operating Since 2012

Acrobat Reader zero-day exploited in the wild for many months (CVE-2026-34621)

Week in review: Exploited Ivanti Connect Secure zero-day, Patch Tuesday forecast

FinSpy: unseen findings

⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [3 February]

Comprehensive analysis of initial attack samples exploiting CVE-2023

Week in review: Axios npm supply chain compromise, critical FortiClient EMS bugs exploited