MacOS

A macOS ClickFix operation using over 250 domains employs browser fingerprinting to selectively display malware lures to Mac users while evading detection by crawlers and sandboxes. Microsoft Threat Intelligence tracked this infrastructure after weeks of monitoring.

A new variant of the XCSSET malware is targeting macOS users by exploiting compromised Xcode projects and GitHub repositories. The attack specifically affects macOS developers through these compromised resources.

A Milan start-up discovered a full-takeover flaw in macOS using ChatGPT but was unable to report it due to Apple's new submission cap. The unreported exploit reportedly cost $200,000.

A new Russian loader-as-a-service named DOUBLECUP uses ClickFix attacks to hide malicious code in PNG images cached by victims' browsers, delivering CountLoader to Windows and macOS devices and a new remote access trojan named DeviceManager to Windows systems.

Kakehashi is an experimental userspace project developed by the wie-project that enables running macOS binaries on Linux ARM systems. The project was shared on Hacker News, receiving 19 points and 6 comments.

ClickLock is a Mac malware that tricks users into running a Terminal command, leading to data theft and remote access. Discovered by Group-IB, it has infected over 100 systems across 33 countries by stealing passwords, browser data, and cryptocurrency wallet files.

OpenCore Legacy Patcher (OCLP) allows users to install newer macOS versions on unsupported Intel Macs, but it currently does not support macOS 26 'Tahoe' due to Apple's limited x86 support. The tool, developed by Dortania and Mykola Grymalyuk, creates patched macOS installers to bypass firmware checks but faces challenges with upcoming macOS updates.

Apple’s MacBook prices have increased, but a Grade A refurbished 2020 MacBook Pro is available for $394.97 (originally $1799) with a Retina display, 16GB RAM, 512GB SSD, and latest macOS support. Refurbished models are highlighted as cost-effective due to Apple laptops' durability.

A new macOS information-stealing malware called CrashStealer pretends to be Apple's crash-reporting tool to steal credentials, keychain data, and crypto wallets.

Zen Mode is a global focus mode for macOS introduced by cabeen. It was shared on Hacker News with 7 points and 1 comment.

The jscrambler 8.14.0 npm package included a malicious preinstall hook that deploys a Rust-based infostealer for Windows, macOS, and Linux during installation. The compromised version was published on July 11, 2026, and automatically executes the malware without requiring additional commands or imports. Security firm Socket detected and flagged the release six minutes after publication.

Cybersecurity researchers have identified QuimaRAT, a Java-based remote access trojan (RAT) capable of targeting Windows, Linux, and macOS systems. The malware is offered as a malware-as-a-service (MaaS) model with subscription tiers ranging from $150 per month to $1,200 for lifetime access.

Command and Conquer Generals has been natively ported to macOS, iPhone, and iPad using the Fable tool. The project's GitHub repository and Hacker News comments provide additional details and community discussion.

Cybersecurity researchers identified PamStealer, a macOS information stealer distributed via fake Maccy AppleScript files. It uses PAM checks to steal Mac login passwords, discovered by Jamf Threat Labs.

The Gemini macOS app now includes Google's Spark agentic AI assistant. This update adds new AI capabilities to the Gemini app for macOS users.

Moves of the Diamond Hand is an unfinished dice-based RPG in Early Access, developed by musician and game designer Cosmo D. It features grimy, blocky environments reminiscent of 2000s-era first-person RPGs and emphasizes strange conversations and dice-rolling mechanics.

The Logitech MX Master 3S wireless mouse is discounted to $89.99 at Amazon, featuring a second scroll wheel, cross-platform compatibility, and customizable buttons. It is praised for comfort and functionality, with a newer MX Master 4 model available at a higher price.

Apple has open-sourced container machines for macOS, a virtualization technology. The documentation is available on GitHub, and the article has 46 points with 9 comments on Hacker News.

Apple’s WWDC 2026 event begins June 8th with a keynote announcing updates to iOS, macOS, and other operating systems. The event may feature a delayed Siri overhaul supported by Google Gemini and a dedicated Siri app, along with Tim Cook’s final CEO address before his September 1st departure and replacement by John Ternus.

The article argues that macOS should reintroduce a grid-based interface feature, referencing user feedback and engagement metrics. It includes a blog post link and Hacker News discussion with 36 points and 18 comments.

Textile is a macOS desktop app that combines text from computer commands, clipboard content, and user-provided strings to dynamically build and modify strings. It was created to automate assembling dynamic URLs and store static text like fractions, using Electron for desktop development. The app is open-source, free, and currently only available for macOS.

A security startup named Calif claims researchers used Anthropic's AI model Claude Mythos to develop a macOS kernel exploit bypassing Apple's M5 chip protections, including Memory Integrity Enforcement (MIE), in under a week. The exploit grants root access from a local user account, highlighting concerns about AI accelerating the discovery of software vulnerabilities.

Age of Empires II: Definitive Edition is now available on macOS via Steam, with existing Windows owners receiving the Mac version automatically. A future release on the Mac App Store is also planned.

The article discusses methods to bypass Apple's Memory Integrity Enforcement (MIE), a security feature in macOS, as detailed in a blog post by IronPeak. Hacker News users have commented on the technical implications of the bypass.

Microsoft's Teams app is displaying non-dismissible location prompts on some macOS systems due to a recent update. The issue has been confirmed by Microsoft. Users are affected by this bug.

A new macOS stealer variant called Reaper targets users by spoofing Apple, Microsoft, and Google, stealing credentials and accessing cryptocurrency wallets. The malware uses macOS Script Editor to execute its payload and bypasses Terminal defenses. Reaper also backdoors infected devices and steals business and financial information.

A new variant of the SHub macOS infostealer has been discovered, using AppleScript to display a fake security update message and installing a backdoor on affected systems. This malware targets macOS devices, posing as a legitimate security update from Apple. The goal is to steal sensitive information from compromised machines.

The article discusses a new audio player built for macOS due to the lack of Winamp. The player was created by Advanced Research and has received comments on Y Combinator. It currently has 19 points and 11 comments.

The asp-classic-emulator allows users to run ASP Classic on macOS, Linux, and BSD operating systems. The project is hosted on GitHub and has been shared on news.ycombinator.com. The emulator has received 3 points but no comments so far.

Researchers from security startup Calif exploited an Apple Mac M5 system using a preview version of Anthropic's Claude Mythos AI to build a macOS kernel exploit. This achievement demonstrates the potential capabilities of AI in cybersecurity. The exploit was made possible by the AI's ability to assist in building the kernel exploit.

OpenAI is asking macOS users to update due to a supply chain attack impacting TanStack and other npm and PyPI packages tied to AI companies. The attack is part of an expanding campaign affecting several AI companies. Users are being warned to take action to protect themselves.

A public macOS kernel memory corruption exploit has been released on Apple M5, marking a significant vulnerability. The exploit was published on a blog and discussed on a news website. This is the first public exploit of its kind for the Apple M5.

A fully working version of TradingView Premium is available for free, offering features like up to 8 charts in one workspace and real-time market data. The project is actively maintained and updated weekly by its author. It can be used on both desktop and mobile devices.

A new driver for Griffin PowerMate has been developed for modern macOS, available on GitHub. The driver was created by James Lockman and has garnered attention on news.ycombinator.com. The project has received 14 points and 5 comments.

Apple has released version 26.5 of its operating systems, including iOS, macOS, and iPadOS, which adds end-to-end encryption for the RCS messaging standard. This update provides green-bubble messages with security and privacy advantages similar to iMessage users. The encrypted RCS messaging is currently limited to a subset of supported cellular carriers.

A Linux rootkit and a macOS crypto stealer were discovered, along with WebSocket skimmers and other security threats. These threats exploited old vulnerabilities and lazy access paths. The security issues were reported in a weekly recap.

Microsoft is testing a new speed boost feature in Windows 11 called Low Latency Profile to improve app launch times and responsiveness. The feature increases CPU frequency in short bursts to speed up menus, flyouts, and apps. This results in significant speed improvements when launching File Explorer, the Start menu, and certain apps.

Apple is planning to introduce Liquid Glass tweaks in the next macOS update to improve legibility issues. The changes aim to enhance user experience, particularly with lists and text-heavy areas. This move indicates Apple's effort to refine its operating system.

A developer has created a static file web server called ymawky for MacOS using ARM64 assembly, supporting various HTTP requests and features. The server is designed to serve custom error pages and mitigate slowloris-like attacks. It also supports directory listing and decodes percent-encoded URLs.

The article discusses the choice of operating system to use in 2026, considering Linux, Windows, and macOS. It provides a comparison of these systems, aiming to help readers decide which one suits their needs best. The discussion is based on an article from Lucas Aguiar's website.