So far this year we’ve seen a few reports about malware that’s affecting Macs. Now Elastic Security Labs has released its spring 2023 Global Threat Report. It offers a big-picture look at the state of malware including how often it’s impacting Mac vs Windows and Linux, the most common malware overall, the most common malware on Mac, and more.
Expand Expanding Close
Delivering on one of Proton Mail users’ top requests for years, Proton is starting the beta of its password manager. Naturally, coming from Proton, it features end-to-end encryption and is open source so anyone can audit the security features. Read on for all the details on this iCloud Keychain alternative.
Expand Expanding Close
Juice jacking popped into the mainstream consciousness this month as the FBI shared a warning to avoid public device charging to protect against the rise of malicious cables. While juice jacking can severely compromise devices, one security expert is raising awareness of a more common – but usually less critical threat – fake public WiFi connections.
Expand Expanding Close
An NSO zero-click iPhone hack worked by gaining access to HomeKit on the device, but it was blocked by those using Apple’s Lockdown Mode security feature, with the phone alerting them to the access attempt.
However, two other NSO zero-click attacks seemingly succeeded – both exploiting vulnerabilities in the Find My app …
Expand Expanding Close
As technology advances, scams are becoming quite sophisticated. One of the latest threats is AI voice cloning which a malicious party can use to make it seem like they have a loved one held hostage. Mix that with caller ID spoofing and it’s a very scary and convincing scam that can impact users on iPhone, Android, and really any phone. Read on for more details and how to protect against AI voice clone and caller ID spoofing scams.
Expand Expanding Close
Over the last several years, LockBit has become one of the most powerful ransomware gangs. While it has focused on Windows, Linux, and virtual host machines, it looks like the group has developed its first ransomware for Macs.
Expand Expanding Close
An upcoming WhatsApp security feature means that you might need to authorize your old phone to allow your account to be moved to a new one …
Expand Expanding Close
Privacy-focused Proton is out today with an upgrade for its calendar service. While maintaining end-to-end encryption, Proton now features shared calendars to better collaborate with friends, family, colleagues, and more.
Expand Expanding Close
Juice jacking has become more and more prevalent in the last several years to the point where the FBI is now warning the public about it. But is juice jacking something iPhone owners need to be concerned about? Let’s look at how it can affect iPhone, three ways to prevent iPhone juice jacking, and more.
Expand Expanding Close
Over the past years, we’ve seen the problem of “juice jacking” grow at public charging stations for phones and other devices. Now the FBI considers the risk of juice jacking so high that it’s telling Americans to completely avoid using public chargers in airports, hotels, and malls.
Expand Expanding Close
Shortly after releasing new software for iPhone and Mac today with “important bug fixes and security updates,” Apple has detailed the specifics of the security flaws that have been patched. Notably, Apple has shared it has seen reports of them being exploited in the wild.
Expand Expanding Close
Alongside the release of iOS 16.4.1, Apple has pushed macOS 13.3.1 to all users. The update comes with bug fixes for emoji and the Auto Unlock feature as well as important security updates that patch two actively exploited vulnerabilities.
Expand Expanding Close
Along with the positive aspects of the new generative AI services come new risks. One that’s surfaced is an advanced approach to cracking passwords called PassGAN. Using the latest AI, it was able to compromise 51% of passwords in under one minute with 71% of passwords cracked in less than a day. Read on for a look at the character thresholds that offer security against AI password cracking, how PassGAN works, and more.
Expand Expanding Close
A research study by Bitdefender revealed that security breaches were covered up by 30% of companies surveyed – and even more IT professionals were put under pressure to keep quiet about them.
This was the case even when there were legal obligations to reveal data breaches to affected customers and regulators …
Expand Expanding Close
Apple remains one of the top-spending companies when it comes to TikTok ads, despite growing controversy about whether the app is a threat to US national security.
A separate report today reveals that the Chinese government engaged in an organized social media campaign to mock US concerns about the app, accusing Congress of technical illiteracy, hypocrisy, and xenophobia …
Expand Expanding Close
With Australia the latest country to act, we’ve now seen TikTok banned from government devices in the US, Canada, the UK, France, Belgium, the European Commission, Australia, and New Zealand …
Expand Expanding Close
Microsoft has announced the latest way it’s integrating OpenAI’s GPT-4 into its services and software. With a fresh app called Security Copilot, Microsoft believes leveraging GPT-4’s AI will usher in “the new era of security” by helping infosec professionals save time, simplify the complex, catch what others miss, and address the talent gap.
Expand Expanding Close
Security researchers have identified a new piece of Mac malware, which they’ve dubbed MacStealer. The malware extracts your iCloud passwords, a wide variety of files, and credit card details stored in browsers.
The good news, however, is that you’d have to be very naive to fall victim to it …
Expand Expanding Close
Apple on Monday released iOS 16.4 and other software updates to the public. While they come with multiple new features, such as new emoji, notifications for web apps, and accessibility improvements, today’s updates also bring security patches. More specifically, they patch more than 30 security exploits.
Expand Expanding Close
Parts of Twitter’s source code were posted to code-sharing site Github, and have seemingly been available there for several months before the company noticed …
Expand Expanding Close
The Federal Communication Commission announced today its first set of rules designed to reduce the number of scam texts Americans get. The move will require carriers to block texts from three types of numbers plus one more measure which will be a start to tackling the rapidly growing problem.
Expand Expanding Close
Following up on releasing the second iOS 16.4 developer and public betas, Apple has pushed a Rapid Security Response update to those on the latest software in testing. It’s unclear for now if this is another test of the Rapid Security Response feature like we’ve seen before or potentially fixing a notable flaw.
Expand Expanding Close
Apple devices have always been known for their security features, which include the Find My network that has received major updates in recent years. However, a report from The Wall Street Journal on Friday revealed that these features are not enough to prevent thieves from accessing users’ data. With iOS 17, Apple should invest even more in anti-theft security features for iPhone and iPad.
Expand Expanding Close
A new report from The Wall Street Journal looks at a recent trend of iPhone thefts that have happened across the US. Instead of just looking to snatch devices, these thieves are watching for passcodes so they can immediately get into iPhones, change Apple ID passwords, access financial accounts, and more. Here’s a look at the risks of using an iPhone passcode in public, how much power the passcode wields, and some steps to keep yourself safer.
Expand Expanding Close