Apple October 2026 updates patch 304 flaws, including prior exploit
Already exploited CoreGraphics flaw CVE-2026-86950 now gets iOS 18 fixes; no newly exploited bug is flagged.
7 stories, newest first · one card per story
Already exploited CoreGraphics flaw CVE-2026-86950 now gets iOS 18 fixes; no newly exploited bug is flagged.

iVerify details P7 DarkSword, an iOS exploit kit that steals keychains and crypto wallets and accepts remote commands.

MacSync returned on macOS via fake wallet apps that steal passwords, crypto wallets, and developer credentials.

SANS analysis shows Macfinger ClickFix delivers a macOS infostealer distinct from AMOS Stealer, using fake CAPTCHAs, websocket C2, and Keychain password theft.

A new PamStealer variant for macOS spreads via a fake crypto wallet, using server-assisted decryption to steal credentials, Keychain data, and crypto assets.

A fake Mac crypto-wallet app delivers new PamStealer malware that steals passwords and browser credentials.

Jamf details AmnesiaStealer, a new Rust-based macOS infostealer that hijacks Chromium sessions for live attacker-controlled browser access and steals Keychain data.
Today 1.6K readers · 2.5K views · 779 reads · all time 189K views