MacSync

macOS ClickFix Campaign Hides Its Lure Behind a Fingerprinting Gate Spirals ransomware double extortion attack chain from IIS web shell to network encryption

Spirals ransomware double extortion attack chain from IIS web shell to network encryption

macOS ClickFix Campaign Hides Its Lure Behind a Fingerprinting Gate

Do Son August 12, 2026

At a glance Malware family Atomic Stealer (AMOS) and MacSync infostealers Threat actor Unnamed operator running a...

Hackers Abused Claude.ai Shared Chat in a ClickFix Malvertising Campaign ACR Stealer infection chain starting with a ClickFix lure to steal browser credentials

ACR Stealer infection chain starting with a ClickFix lure to steal browser credentials

Hackers Abused Claude.ai Shared Chat in a ClickFix Malvertising Campaign

Do Son June 24, 2026

At a Glance Platform abused claude.ai shared chat feature (Anthropic) and GitLab Pages Data exposed Browser credentials,...

New “ClickFix” Campaign Bypasses Gatekeeper to Hijack macOS Devices macOS ClickFix Campaign Terminal Infostealer

macOS ClickFix Campaign Terminal Infostealer

New “ClickFix” Campaign Bypasses Gatekeeper to Hijack macOS Devices

Do Son May 9, 2026

For years, macOS users have relied on community forums, Medium articles, and tech blogs to solve everyday...

Mac Users Beware: “MacSync” Malware Tricks You Into Hacking Yourself MacSync Malware macOS ClickFix

MacSync Malware macOS ClickFix

Mac Users Beware: “MacSync” Malware Tricks You Into Hacking Yourself

Do Son January 23, 2026

A sophisticated new malware campaign is targeting macOS users with a lethal combination of social engineering and...

🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

CVE-2026-81578CVSS 8.8
An improper access control vulnerability exists in the web management interface of PaperCut MF and PaperCut NG. Under...
Admin intel📅 Updated: Aug 28, 2026
CVE-2026-82078CVSS 9.4
An unsafe dynamic class loading vulnerability exists in the database connection utilities of PaperCut MF and PaperCut NG....
Admin intel📅 Updated: Aug 28, 2026
CVE-2026-66384CVSS 5.3
An authenticated user may write data outside the intended Docker cache path under specific remote-repository conditions.
CISA KEV📅 Added to KEV: Aug 27, 2026
CVE-2023-49105CVSS 9.8
An issue was discovered in ownCloud owncloud/core before 10.13.1. An attacker can access, modify, or delete any file...
CISA KEV📅 Added to KEV: Aug 27, 2026
CVE-2021-23758CVSS 8.1
All versions of package ajaxpro.2 are vulnerable to Deserialization of Untrusted Data due to the possibility of deserialization...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2019-1068CVSS 8.8
A remote code execution vulnerability exists in Microsoft SQL Server when it incorrectly handles processing of internal functions,...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2015-3246CVSS 5.1
libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly...
CISA KEV📅 Added to KEV: Aug 26, 2026
CVE-2015-5287CVSS 7.8
The abrt-hook-ccpp help program in Automatic Bug Reporting Tool (ABRT) before 2.7.1 allows local users with certain permissions...
CISA KEV📅 Added to KEV: Aug 26, 2026