home.social

#macossecurity — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #macossecurity, aggregated by home.social.

fetched live
  1. 💻 macOS Tahoe 26.6.1, macOS Sequoia 15.7.9 y macOS Sonoma 14.8.9 para solucionar un problema de seguridad de compartir pantalla

    #macOSSecurity #macOS

    mecambioamac.com/macos-tahoe-2

  2. ClickFix campaigns are now leveraging LLM-generated public artifacts for malware distribution.

    Per Moonlock Lab and AdGuard:
    • Abuse of Claude artifact pages
    • Google Ads search poisoning
    • Obfuscated shell execution (base64 decode → zsh)
    • Second-stage loader for MacSync infostealer
    • Hardcoded API key + token-protected C2
    • AppleScript (osascript) handling data theft
    • Archive staging at /tmp/osalogging.zip
    • Multi-attempt POST exfiltration

    Previous campaigns exploited ChatGPT and Grok sharing features.
    LLM trust is now an operational risk vector.
    Should EDR flag suspicious AI-guided shell patterns?

    Source: bleepingcomputer.com/news/secu

    Engage below.
    Follow @technadu for deep technical threat analysis.

    #ThreatIntel #MacOSSecurity #Infostealer #C2Traffic #ClickFix #LLMSecurity #MalwareAnalysis #AppSec #BlueTeam #EDR #ThreatHunting #CyberThreats #ZeroTrust

  3. Safari 26.3 patches 6 critical vulnerabilities CFNetwork flaw allowed arbitrary file writing. AdwaitX analyzes WebKit security fixes for macOS Sonoma and Sequoia users. Update now to protect browsing data #AdwaitX #Safari #macOSSecurity

    adwaitx.com/safari-26-3-securi

  4. A new macOS-focused AMOS infostealer campaign is redirecting users to shared ChatGPT and Grok conversations via malicious Google ads. The chats contain Terminal commands that decode into a script installing AMOS with elevated privileges.

    AMOS then targets crypto wallets, browser data, Keychain items, and more - with persistence handled through LaunchDaemons and AppleScripts.

    This campaign highlights how AI platforms and search ads can be misused as delivery mechanisms.

    What safeguards should exist to prevent similar abuse?

    Source:
    bleepingcomputer.com/news/secu

    Follow TechNadu for more threat-intel updates.

    #Infosec #ThreatIntel #macOSSecurity #AMOS #Malware #DigitalSafety #AIChatSecurity #CyberAwareness

  5. A seemingly routine tool update could be a trap—malware like AMOS and Odyssey are stealthily targeting macOS developers and snatching credentials and source code. Are you prepared for this new wave of cyber threats?

    thedefendopsdiaries.com/the-ri

    #macossecurity
    #infostealers
    #cyberthreats
    #amosmalware
    #odysseymalware

  6. A seemingly routine tool update could be a trap—malware like AMOS and Odyssey are stealthily targeting macOS developers and snatching credentials and source code. Are you prepared for this new wave of cyber threats?

    thedefendopsdiaries.com/the-ri

    #macossecurity
    #infostealers
    #cyberthreats
    #amosmalware
    #odysseymalware