OpenAI integrates Codex into the ChatGPT app! Monitor tasks, approve code, and manage remote macOS environments from your phone with encrypted secure relays.
macOS
Microsoft reveals a macOS ClickFix campaign using fake "fixes" to trick users into running Terminal commands that bypass Gatekeeper and steal crypto wallets.
Minirat, a Go-based macOS RAT, exploits npm supply chains to bypass security. It features VM detection, AES encryption, and persistence. Secure your dev tools.
Cursor AI editor found storing API keys and tokens in an unprotected SQLite database, allowing extensions to steal credentials silently. CVSS 8.2. No patch yet.
NVIDIA issued an urgent patch for a critical 9.8 CVSS flaw in the FLARE SDK. Stop unauthenticated RCE and data tampering. Upgrade to v2.7.2 immediately.
Cisco Talos reveals how attackers use native macOS features like Spotlight and SNMP to hijack enterprise workstations. Secure your DevOps environment today.
Netskope uncovers a ClickFix macOS campaign that holds the UI hostage to steal system passwords, Keychains, and 200+ browser extensions.
Microsoft's OOB update for .NET 10 (CVE-2026-40372) hits Linux/macOS users. Authentication is at risk. Stop the bypass and rotate your keys today.
Microsoft uncovers Sapphire Sleet's macOS campaign. Using fake recruiters and AppleScript, they bypass TCC to steal crypto wallets, Telegram, and SSH keys.
Use-after-free flaw in Rsync versions 3.0.1–3.4.1 allows DoS and info leaks via malicious xattr traffic. Learn how a simple qsort fix secures your syncs.
Starting May 2026, OneDrive cloud deletions will no longer land in your local Recycle Bin. Learn how this mandatory update changes file recovery forever.
Adobe is bypassing Chrome security by quietly editing your hosts file to track Creative Cloud installations. Learn how this stealth telemetry works in 2026.
Intego exposes a malicious Ledger Live app for macOS. Using weaponized Electron ASAR archives and a TLS bypass, OSX/Amos silently siphons your seed phrases.
Google is testing a standalone Gemini app for Mac featuring "Desktop Intelligence." Discover how Gemini will "see" your screen to rival ChatGPT and Claude.
PoC exploit code is now public for CVE-2026-20643. Apple issues its first Background Security Improvement to fix this cross-origin Navigation API flaw.
Google Chrome is testing a new auto-launch toggle in Jan 2026. Learn how to enable the foreground startup feature for near-instant boot response.
Microsoft Excel's Agent Mode is now on Windows and Mac! Switch between GPT-5.2 and Claude 4.5 to automate complex workbooks and live web data.
Anthropic launches Claude Cowork, a desktop agent that can autonomously organize files, extract data, and navigate the web directly on your Mac.
Fixed: Logitech's macOS certificate issue. Download the manual patch for Logi Options+ and G HUB to restore your custom settings immediately.
Exploit blueprints for Apple zero-day CVE-2025-43529 are now public. Millions of iPhones and Macs are at risk. Update to iOS 26.2 immediately.
Logitech forgot to renew its macOS developer certificate on Jan 6, 2026, breaking Logi Options+. Learn how to fix the loading screen & battery drain.