42672 matches found
How Phished Data Turns into Apple & Google Wallets
Carding -- the underground business of stealing, selling and swiping stolen payment card data -- has long been the dominion of Russia-based hackers. Happily, the broad deployment of more secure chip-based payment cards in the United States has weakened the carding market. But a flurry of innovati...
New XCSSET Malware Variant Targeting macOS Notes App and Wallets
Microsoft warns Apple developers about a new XCSSET malware variant targeting macOS, posing security risks through stealthy infections…...
Microsoft Uncovers New XCSSET macOS Malware Variant with Advanced Obfuscation Tactics
Microsoft said it has discovered a new variant of a known Apple macOS malware called XCSSET as part of limited attacks in the wild. "Its first known variant since 2022, this latest XCSSET malware features enhanced obfuscation methods, updated persistence mechanisms, and new infection strategies,"...
A week in security (February 10 – February 16)
Last week on Malwarebytes Labs: A suicide reveals the lonely side of AI chatbots, with Courtney Brown Lock and Code S06E03 Apple ordered to grant access to users’ encrypted data Phishing evolves beyond email to become latest Android app threat Apple fixes zero-day vulnerability used in "extremely...
The vulnerability of the CoreAudio component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows a hacker to trigger a service failure.
The vulnerability of the CoreAudio component in macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to unlimited resource allocation. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
The vulnerability of the SceneKit component in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows attackers to disclose protected information.
The vulnerability of the SceneKit component in macOS, iOS, iPadOS, watchOS, tvOS, and visionOS relates to operations where data is written beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to disclose sensitive information that is protected by security...
Apple macOS elevation of privilege vulnerability (CNVD-2025-05223)
Apple macOS is a specialized operating system developed by Apple for Mac computers. An elevation of privilege vulnerability exists in Apple macOS, which can be exploited by an attacker to gain elevated privileges...
Unspecified Vulnerability in Apple GarageBand (CNVD-2025-06484)
Apple GarageBand is an application from Apple USA. An unspecified vulnerability exists in Apple GarageBand, which can be exploited by an attacker to execute arbitrary code...
The Official DOGE Website Launch Was a Security Mess
Plus: Researchers find RedNote lacks basic security measures, surveillance ramps up around the US-Mexico border, and the UK ordering Apple to create an encryption backdoor comes under fire...
CVE-2024-37602
An issue was discovered in Mercedes Benz NTG New Telematics Generation 6 through 2021. A possible NULL pointer dereference in the Apple Car Play function affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP...
CVE-2024-37602
An issue was discovered in Mercedes Benz NTG New Telematics Generation 6 through 2021. A possible NULL pointer dereference in the Apple Car Play function affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP...
CVE-2025-20615
The Qardio Arm iOS application exposes sensitive data such as usernames and passwords in a plist file. This allows an attacker to log in to production-level development accounts and access an engineering backdoor in the application. The engineering backdoor allows the attacker to send hex-based...
CVE-2024-37602
An issue was discovered in Mercedes Benz NTG New Telematics Generation 6 through 2021. A possible NULL pointer dereference in the Apple Car Play function affects NTG 6 head units. To perform this attack, physical access to Ethernet pins of the head unit base board is needed. With a static IP...
The vulnerability of the CoreMedia component in operating systems such as MacOs, iPadOS, VisionOS, iOS, WatchOS, and tvOS allows a hacker to trigger a service failure.
The vulnerability of the CoreMedia component in operating systems such as MacOs, iPadOS, VisionOS, iOS, WatchOS, and tvOS is related to the unlimited distribution of resources. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...
The vulnerability in the kernel of operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS allows attackers to escalate their privileges and execute arbitrary code.
The vulnerability of the kernel in operating systems such as macOS, iOS, iPadOS, watchOS, tvOS, and visionOS is related to improper code generation. Exploiting this vulnerability can allow attackers to increase their privileges and execute arbitrary code...
The vulnerability of the QuartzCore component in operating systems such as MacOs, visionOS, tvOS, watchOS, iPadOS, and iOS allows a hacker to trigger a service failure.
The vulnerability of the QuartzCore component in operating systems such as MacOs, visionOS, tvOS, watchOS, iPadOS, and iOS is related to improper cleaning or release of resources. Exploiting this vulnerability can allow a remote attacker to cause service interruptions...
Mercedes-Benz NTG 安全漏洞
The Mercedes-Benz NTG is an automobile from Mercedes-Benz Germany. A security vulnerability exists in Mercedes-Benz NTG that stems from a null pointer dereference in the Apple Car Play feature. An attacker exploiting the vulnerability could cause the Car Play service to crash...
The vulnerability of the Kernel component in operating systems such as MacOs, tvOs, watchOs, iPadOs, and iOS allows attackers to influence data integrity.
The vulnerability of the Kernel component in macOS, tvOS, watchOS, iPadOS, and iOS is related to deficiencies in access control within isolated environments. Exploiting this vulnerability could allow attackers to compromise data integrity...
The vulnerability of the IOMobileFrameBuffer component in operating systems such as MacOs, tvOs, watchOs, iPadOs, and iOS allows a perpetrator to influence data integrity.
The vulnerability of the IOMobileFrameBuffer component in operating systems such as MacOs, tvOS, watchOS, iPadOS, and iOS lies in reading data beyond the allowed range in memory. Exploiting this vulnerability can allow an attacker to compromise data integrity...
The vulnerability of the IOMobileFrameBuffer component in operating systems such as MacOs, tvOs, watchOs, iPadOs, and iOS allows attackers to compromise the confidentiality, integrity, and accessibility of protected information.
The vulnerability of the IOMobileFrameBuffer component in operating systems such as MacOs, tvOS, watchOS, iPadOS, and iOS lies in the reading of data beyond the buffer boundaries in memory. Exploiting this vulnerability can allow attackers to compromise the confidentiality, integrity, and...