Ravie LakshmananApr 09, 2026Hacking News / Cybersecurity News Thursday. Another week, another batch of things that probably should’ve been caught sooner but weren’t. This one’s got some range — old vulnerabilities getting new life, a few “why was that even possible” moments,… Read More "Hybrid P2P Botnet, 13-Year-Old Apache RCE and 18 More Stories"
The researchers pointed out that the behavior of the Script Editor may vary depending on the macOS version. “On recent versions of macOS Tahoe, an additional warning prompt is presented, requiring the user to allow the script to be saved… Read More "New ClickFix variant bypasses Apple safeguards with one‑click script execution"
Several civil society figures in Middle Eastern countries, including three high-profile journalists in Egypt and Lebanon, have been targeted by a spear-phishing campaign likely tied to a known South Asian cyber espionage group. The campaign was detected by digital civil… Read More "Middle East Hack-for-Hire Operation Traced to South Asian APT Group"
Researchers from RSAC have found a way to bypass the safety protocols of Apple’s Intelligence AI with a high success rate. Apple Intelligence is a deeply integrated personal intelligence system for iOS, iPadOS, and macOS that combines generative AI with… Read More "Apple Intelligence AI Guardrails Bypassed in New Attack"
As AI tools become more accessible, employees are adopting them without formal approval from IT and security teams. While these tools may boost productivity, automate tasks, or fill gaps in existing workflows, they also operate outside the visibility of security teams, bypassing… Read More "The Hidden Security Risks of Shadow AI in Enterprises"
Before I ever held a security title, I was a software engineer implementing vertically integrated automation systems for industrial manufacturing, warehouse-scale conveyor networks, robotic material handling, physical infrastructure controlled by software on increasingly connected networks. I learned early that tightly… Read More "Weak at the seams | CSO Online"
From unintentional data leakage to buggy code, here’s why you should care about unsanctioned AI use in your company 11 Nov 2025 • , 5 min. read Shadow IT has long been a thorn in the side of corporate security… Read More "Why shadow AI could be your biggest security blind spot"
A malware campaign which targets macOS systems, distributed using a ClickFix attack, has evolved to exploit Script Editor as the execution vector rather than the typical Terminal-based point of execution. Identified by researchers at Jamf Threat Labs, the campaign is… Read More "Atomic Stealer MacOS ClickFix Attack Bypasses Apple Security Warnings"
Palo Alto Networks and SonicWall have separately announced patches for multiple vulnerabilities across their products, including two high-severity bugs. Palo Alto Networks patched three flaws and rolled out third-party fixes for Cortex platforms, ADEM for Windows, PAN-OS, and products using… Read More "Palo Alto Networks, SonicWall Patch High-Severity Vulnerabilities"
Look no further to learn how cybercriminals could try to crack your vault and how you can keep your logins safe 13 Nov 2025 • , 5 min. read The average internet user has an estimated 168 passwords for their… Read More "Can password managers get hacked? Here’s what to know"
