Atomic (AMOS) Infostealer: macOS Credential Theft Tool
Atomic, also known as AMOS, is a commodity infostealer targeting macOS. UNC7005 uses it to steal data from macOS hosts, often delivered…
Tag: macOS
Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, confirming active…
MacSync Stealer: A macOS Information Stealer
MacSync Stealer is a macOS-focused information stealer that collects credentials, cookies, SSH keys, AWS credentials, and other sensitive data. It uses ClickFix…
CVE-2026-65400 — Apple macOS Improper Authentication Vulnerability
Apple macOS Improper Authentication Vulnerability Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based…
CVE-2026-43760: Access Issue in macOS Screen Sharing
CVE-2026-43760 is an access issue in macOS Screen Sharing with a CVSS score of 8.6, allowing an app to access user-sensitive data.…
Screen Sharing: macOS Remote Desktop Feature
Screen Sharing is a built-in remote desktop service in macOS that allows users to control another Mac over the network. It is…
Apple macOS Screen Sharing Flaw CVE-2026-65400 Exploited to Deploy Monero Miner on Exposed Macs
A critical authentication bypass vulnerability in Apple macOS Screen Sharing, tracked as CVE-2026-65400 (CVSS 9.8), is being actively exploited in the wild…
CVE-2026-43779: Logic Issue in macOS Screen Sharing Server
CVE-2026-43779 is a logic issue in the Screen Sharing Server component of macOS, with a CVSS score of 9.8. It could allow…
CVE-2026-43777: Denial-of-Service in macOS Screen Sharing
CVE-2026-43777 is an unspecified issue in macOS Screen Sharing Server with a CVSS score of 7.5, allowing a remote attacker to cause…
CVE-2020-9771: TCC Bypass in macOS Catalina
CVE-2020-9771 is a TCC bypass vulnerability in macOS Catalina that allows malware to access protected data without user consent. AmnesiaStealer exploits this…