#macos
-
macOS 15.8.2 Update Breaks OpenGL
Users report that the macOS 15.8.2 release breaks OpenGL. The thread drew a lively discussion on Hacker News.
-
RemoveMacAI strips Apple Intelligence from macOS 27 with one command
macOS 27 no longer offers a single switch for Apple Intelligence, and its downloaded models linger on disk even after the features are off. RemoveMacAI promises to reclaim that space — reversibly.
-
Google Gemini may soon get full access to your Mac's files, apps and the web
Google is testing a desktop mode for Gemini that could let it read and modify any file on your computer, control apps, and act without asking permission every time.
-
Apple to tighten Mac disk access over risks from AI agents
The company is adding new limits to macOS "full disk access," saying that as autonomous AI agents grow more capable, the risks tied to this permission will increase "substantially."
-
Apple patches actively exploited CoreGraphics zero-day
Apple has shipped security updates that fix a zero-day flaw used in "extremely sophisticated" targeted attacks against iOS devices.
-
North Korea's Jade Sleet Hits Indian IT Provider With FLATROOF and ROOFDECK Backdoors
SentinelOne has linked the Jade Sleet group to a breach of a small Indian IT firm using macOS backdoors already seen in the KelpDAO bridge attack. The case again shows that developers remain North Korea's favourite way in.
-
Homebrew 7.0.0: Built-in Vulnerability Scanning, a Sandbox, and Farewell to Intel
Version 7.0.0 of the popular package manager is out: faster installs, tighter isolation, a native macOS app, and its own vulnerability database. And with it, the project bids a final farewell to Intel processors.
-
ClickFix: How a Fake CAPTCHA Tricks Victims into Infecting Their Own Computers
ClickFix attacks have gone from an exotic rarity to a mass phenomenon: PC and Mac users are being tricked into running malicious commands themselves. Even pro-Kremlin hacking groups have taken up the technique.
-
Darling: Running macOS Apps on Linux, the Wine Way
The Darling project offers a compatibility layer that lets you run macOS programs directly on Linux — with no hardware emulation and no violation of Apple's license.
-
Microsoft Links More Than 30 Domains to the Infrastructure of the MacSync macOS Stealer
Microsoft Defender experts traced the path of the MacSync macOS stealer from payload download to data theft, correlating recurring network and behavioral markers across constantly shifting infrastructure.
-
ChatGPT Learns to Watch You: The New Computer History Feature Remembers Clicks and Keystrokes
The ChatGPT desktop app for macOS has gained a Computer History feature that turns a user's actions into training data. OpenAI promises it doesn't take screenshots — it only records “events.”
-
macOS Screen Sharing Flaw Exploited to Mine Monero
The Dutch cybersecurity center is warning of active exploitation of an authentication-bypass vulnerability in macOS: attackers gain root access and install a cryptocurrency miner.
-
ClickFix for macOS: an infostealer quietly skims a slice of your crypto
Researchers at Huntress have uncovered a Go-based piece of malware that steals passwords, Apple Keychain data and hijacks cryptocurrency transactions through fake instructions in Terminal — but drains only a portion of the wallet rather than the whole thing.
-
Pre-auth RCE in Apple Screen Sharing: root in 60 seconds thanks to a forgotten error code
A critical vulnerability has been found in the screensharingd daemon on macOS up to version 26.5: a bug in the SRP frame-length check lets an unauthenticated attacker gain root privileges with no password and no user interaction.
-
North Korean Hackers Target macOS Through Fake Updates and Search Ads
A DPRK-linked group has added a new trick to its Contagious Interview campaign: a full-screen fake macOS update prompts the victim to run a malicious command in the terminal themselves.
-
Calif throws down the gauntlet: beat Apple's MIE with two vulnerabilities
Researchers at Calif have disclosed two vulnerabilities in the SMBClient and WebDAV components of macOS and invited the community — humans, AIs and mixed teams alike — to build on them an exploit that grants root on a device with MIE protection fully enabled.
-
SharedRoot: Claude Cowork's Agent Could Break Out of Its Virtual Machine to Reach Mac Files
Researchers at Accomplish AI have shown how Anthropic's AI agent breaks out of a Linux sandbox with a single message and gains access to a Mac's entire file system. The vulnerability affected roughly 500,000 macOS users.