Following the release of new betas last week, Apple snuck out one of the most significant updates to XProtect I’ve ever seen. The macOS malware detection tool added 74 new Yara detection rules, all aimed at a single threat, Adload. So what is it exactly, and why does Apple see it as such an issue?

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

At this year’s annual hacking conference, Black Hat Asia, a team of security researchers revealed how cybercriminals are sneakily using stolen credit cards and Apple Store Online’s ‘Someone else will pick it up’ option in a scheme that has stolen over $400,000 in just two years.

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Cybercrime is on an unprecedented rise. A new Statista Market Insights survey predicts that the annual cost of cyberattacks will reach $9.2 trillion this year. For perspective, that’s about one-third of the United States’ GDP or 24 times Apple’s annual revenue in 2023.

Here’s what I’ve learned after calling up a few industry professionals.

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Email security today has many shortcomings. It is widely known that email service providers cannot prevent every suspicious email from being received. However, a new study by web browser security startup SquareX reveals how little companies are doing to block malicious attachments and protect users.

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

During an analysis of various splinter samples of a noteworthy macOS stealer, security researchers at Moonlock discovered one with an alarming level of sophistication. Under the disguise of the unreleased video game GTA 6, once installed, the malware executes rather clever techniques to extract sensitive information, such as passwords from a user’s local Keychain.

In typical Security Bite fashion, here’s the breakdown: how it works and how to stay safe.

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Update: Apple released details on the security patches for iOS 17.4.1, iPadOS 17.4.1, visionOS 1.1.1, as well as macOS 14.4.1. They all patch an integer overflow vulnerability in two separate frameworks. Apple didn’t say whether it was being actively exploited. More details can be found here.

Last week, Apple released iOS 17.4.1 with rather vague release notes claiming to include important bug fixes and security patches. Two days later, the company has yet to add any specifics. This is unusual for Apple, which typically lists critical security patches hours after a release and suggests that the ones in iOS 17.4.1 could be significant or something else entirely…

Ever wonder what malware can your Mac detect and remove without any third-party software? Recently, security researchers have correlated some bizarre macOS YARA rules used by the built-in XProtect suite with their public names. Here’s what malware it looks for…

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

ExpressVPN has been making impressive moves in the hardware space since the introduction of the Aircove router in 2022. Today, the popular virtual private network provider is expanding its lineup by launching its first portable Wi-Fi 6 router with built-in VPN protection. Meet .

CISA says two systems were hacked in February through vulnerabilities in Ivanti products. In response, the agency had to shut down both systems, which reportedly had critical ties to U.S. infrastructure.

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Update: LastPass told 9to5Mac that a product release caused the outage. Details below.

It’s not just you. LastPass, the popular password manager used by over 33 million people, suffered from widespread downtime this morning. It only appeared to affect users visiting the service’s main website, who were quickly presented with “404 Not Found” error messages.

Security researchers at Moonlock, the relatively new cybersecurity wing of MacPaw, have detected a new strain of macOS malware disguised as a legitimate Mac app that can destroy itself in certain conditions. At its worst, it can unknowingly extract cookies from Safari and Chrome, contacts from Address Book, and passwords from installed password managers. Meet Empire Transfer…

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Hey, Arin here. Last week was the busiest for security so far this year. We saw an unprecedented offensive on the LockBit ransomware gang; Apple moved to make iMessage future-proof with quantum computer protection, and the topic of this week, Jamf’s new report highlighting some alarming statistics around Apple-using businesses. So, grab your drink of choice. Let’s get into it…

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Last week, Apple finally released an in-depth Vision Pro and visionOS data privacy overview. While it was arguably something that the company could’ve been available at launch, it helps explain what precisely the spatial computer collects from our surroundings and sends to third-party applications, and more…

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

It was a landmark year for ransomware in 2023 and a well-publicized one following the MOVEit and MGM Resorts beaches that shook the security industry. Not only did threat actors collectively pocket a record-breaking $1.1 billion from victims, but a new report highlights how the scope and complexity of these attacks are becoming increasingly concerning.

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Last week on Security Bite, I discussed a vulnerability in Stolen Device Protection, a newly added security feature in iOS 17.3. Vision Pro has since hit the market and has been dominating the headlines. This Sunday, I wanted to give your feed fresh air and discuss some of my favorite security and privacy features as of iOS 17.3. Admittedly, this will also give me more time to poke around at Vision Pro’s privacy and security protections in the real world.

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Last week, Apple released iOS 17.3 with a new security feature called Stolen Device Protection, which aims to help protect your data in case a thief has stolen your iPhone and obtained the password. However, there’s one flaw that you should be aware of…

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

After being teased over the past few weeks, Apple’s seventh retail store in Seoul’s Mapo District, near Hongik University Station in South Korea, has opened to the public. Apple Hongdae is a relativity modest location, but it doesn’t disappoint. Check it out!

Security researchers have detected a new strain of malware hidden in some commonly pirated macOS applications. Once installed, the apps unknowingly execute trojan-like malware in the background of a user’s Mac. What happens from here is nothing good…

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

Apple’s first new flagship product in almost a decade is just around the corner, with pre-orders for Apple Vision Pro beginning next Friday. The company is promising a new spatial computing era, but is the mixed reality (XR) headset a game-changer product or a potential privacy nightmare? Answer: Maybe both…

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

We’ve seen drop tests, but nothing like this. While searching for the missing door plug from Alaska Airlines Flight 1282, a resident stumbled upon an intact iPhone on the side of the road. He soon discovered that it actually belonged to a passenger on the plane.

Productivity apps equipped with the promises of “artificial intelligence” are becoming increasingly common. From prioritizing tasks to keeping up with a fitness routine, there’s seemingly a ChatGPT-powered productivity app for just about any New Year resolution. However, beneath the surface, it feels like the beginning of a cautionary tale.

9to5Mac Security Safe Space exclusively is brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management, with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

A new strain of Instagram phishing emails has been detected, in which attackers attempt to trick victims into forking over usernames, passwords, phone numbers, and, most notably, backup codes used to bypass two-factor authentication (2FA).

December could very well be security month at Apple with the launch of Stolen Device Protection, the shuttering of Beeper Mini, and now, the stealthy fix to a Bluetooth exploit that has been wreaking havoc for iPhone and iPad users since its discovery in September.

In September, 9to5Mac reported that Flipper Zero, a popular and cheap hacking tool, was being used to wreak havoc on nearby iPhones and iPads, spamming them with fake Bluetooth pop-ups until they eventually crashed.

Despite many iOS 17 updates since, including last week’s release of new iOS 17.2 betas, Apple has yet to implement safeguards to prevent the attack. So, what gives?

Security researchers have pulled the curtain back on what appears to be a variant of the infamous RustBucket malware that targets macOS systems. What was first detected earlier in April, a new report from Jamf Threat Labs highlights how this attack continues to evolve and who its potential targets may be.

ExpressVPN, which has now amassed more than 4 million subscribers, announced on Monday that the service now includes a full-fledged password manager with no additional app or subscription required. It’s a familiar tune, and this rendition is called ExpressVPN Keys.

Security researchers have identified an attempt by state-sponsored hackers from the Democratic People’s Republic of Korea (DPRK) to infect blockchain engineers belonging to an undisclosed crypto exchange platform with a new form of macOS malware.

If you keep tabs on the information security world, you know Okta’s recent support systems breach has been all the talk. Now 1Password, a popular password manager trusted by millions of people and over 100,000 businesses, reports that threat actors had accessed its internal Okta management account.

Last month, 9to5Mac reported on claims that iPhone users were experiencing privacy settings change without permission after updating to iOS 17. Now, in an update available for beta testers, Apple claims to have addressed the bug.

After updating to the release version of iOS 17, some iPhone users are experiencing their existing privacy settings change without permission. Apple says it is investigating these reports. Here’s the latest.

In more T-Mobile news surely to give you déjà, déjà, déjà vu, the company has reportedly fallen victim to its third data breach this year, with over 90GB of employee and customer information stolen. And if you aren’t keeping track, it’s the company’s eighth major breach since 2018…

Update: New information suggests the data breach doesn’t affect T-Mobile itself, but an independent T-Mobile retailer called ConnectivitySource. The data from the leak “is related to an independently owned authorized retailer,” T-Mobile told 9to5Mac. “T-Mobile’s employee data was not exposed.”

ConnectivitySource is one of the company’s largest authorized retailers and operates in 38 states across the US. Around 146,109 audio recordings of customers calling stores were also collected by the hackers, claims vx-underground.

Apple has officially announced that iOS 17 is coming to all users on September 18. And while we are getting a few great headliners like NameDrop and Live Voicemails, we also got a sneak peek at some neat security and privacy features coming to iPhone; including one that auto-deletes verification codes. Here are five I think are most important.

We now have an official release date for macOS 14 Sonoma, Apple’s next major software update for Mac users. After today’s “Wonderlust” Apple Event, the company posted that macOS Sonoma will be released to the general public on September 26.

Unfortunately, Sonoma coming this month suggests that we won’t see a Mac/iPad event in October.

In a move aimed at continuing its commitment to sustainability, Apple will be “phasing out” its popular leather iPhone cases and Apple Watch bands. Instead, the tech giant is introducing a new material called FineWoven, signaling a significant shift towards being more eco-friendly.

Twitter’s abrupt rebrand to the letter X is leaving a lot of users confused about the direction of the platform. With this comes an opportunity for cybercriminals, who are now taking advantage of the chaos with some of the most clever phishing emails I’ve ever seen…

Update: Brevo (formally known as Sendinblue) has taken down the mailing list account used by the threat actors. In addition, a security engineer at Twitter confirmed that they are working to address the fake API account.

Coming on the heels of ShadowVault, a new infostealer malware dubbed “Realst” is being implemented into fake blockchain games by cybercriminals in a massive campaign targeting Windows and macOS users, including those on macOS 14 Sonoma.

Users of the popular web browser Firefox have reported issues when trying to load Twitter web, citing the need to continuously enter credentials and not being able to log in entirely.

Update: The bug appears to have been fixed on Twitter’s end.

more…

The post Having issues with Twitter on Firefox? It’s not just you [Update: Fixed] appeared first on 9to5Mac.

We’ve teamed up with GRID Studio, the company known for framing Apple products, to give three lucky winners a frame of their choice; here’s who won.

more…

The post Here are the winners of our GRID frame giveaway appeared first on 9to5Mac.

LinkedIn is suffering from widespread downtime this morning. The system-wide outage is affecting business administrators who are unable to access company pages. When navigating directly to your company’s LinkedIn page, it may appear as if you’re a regular user or not at all.

more…

The post LinkedIn outage is causing lost admin access to company pages [Update: Fixed] appeared first on 9to5Mac.

On this day 40 years ago, Apple’s first Macintosh went on sale, just two days after being introduced to the world during a commercial break in the third quarter of Super Bowl XVIII. Although “1984” became a cultural phenomenon and a watershed moment for product launches, Apple’s Board of Directors was against it from the start. Here’s how the legendary ad almost didn’t air…

A new, rather hilarious, Apple TV+ ad starring Timothée Chalamet has started making its rounds today. It comedically follows the award-winning actor as he reacts to Apple TV shows and movies that include big names, but not Chalamet… at least for now.

more…

The post Timothée Chalamet is desperate to have an Apple TV+ show in new ad appeared first on 9to5Mac.

Update: Apple TV+ and Apple TV Channel’s System Status now show that the issue has been resolved. Apple reports that the outage lasted 1 hour 32 minutes, between 8:13 PM – 9:45 PM EST.

Apple TV+ and Apple TV Channels are suffering from widespread downtime this evening. The services appear to be down across the board for iOS devices and Mac. When attempting to open the Apple TV app, it may present a longer-than-usual loading icon and quickly go straight to your Library rather than the service.

more…

The post Apple TV+ service outage causing ‘content unavailable’ error on Apple TV, iPhone app goes offline [U: Now Fixed] appeared first on 9to5Mac.

On this day, in 1983, Apple Computer introduced the Lisa. One of the first personal computers to implement two new leading-edge ideas – a GUI (Graphical User Interface) and a mouse. But its ill-fated $10,000 price tag doomed it from the start.

more…

The post On this day in history: Before the Macintosh, Apple Computer introduced the ill-fated Lisa appeared first on 9to5Mac.

On this day 47 years ago, Paul Terrell opened the Byte Shop, one of the world’s first personal computer retail stores and famously known for ordering the first rudimentary computers from Steve Jobs and Steve Wozniak’s newly formed company, Apple Computer.

more…

The post On this day in Apple history: Byte Shop opens, Apple’s first customer appeared first on 9to5Mac.

As 2022 comes to a close, it’s no surprise that it’s been a busy year for Apple with many great hardware releases. The company debuted its Dynamic Island interactive notch, some killer new Macs, an M2 iPad Pro, and John Mayer’s new favorite smartwatch – Apple Watch Ultra.

In honor of all this new hardware and more, we created the Best Apple product release of 2022 bracket that’s now live on 9to5Mac’s Twitter.

more…

The post Best Apple product bracket: Vote on your pick for 2022 releases appeared first on 9to5Mac.

Update: Elizabeth Holmes has been sentenced to 135 months (11.25 years) in prison. Ramesh “Sunny” Balwani’s sentencing is set for next month.

Former Silicon Valley star (and Steve Jobs wannabe), Elizabeth Holmes, has arrived at a federal courthouse in San Jose to await her sentencing hearing, which could likely be the final chapter in the ongoing saga of Theranos, a sham blood-testing technology company.

more…

The post Elizabeth Holmes sentencing for Theranos scam happening today, but Apple TV+ portrayal up in the air appeared first on 9to5Mac.

While iOS 16 fronts a snazzy redesigned lock screen, underneath, the latest operating system hosts a slew of new security and privacy features built to help protect you and your data. Here are five new features to better secure your iPhone from hackers and give you greater peace of mind.

more…

The post 5 important iPhone security features you should know about appeared first on 9to5Mac.

Amidst the layoffs, verification changes, notable executive departures, a fleeting ads business, and the undeniable dumpster fire that is Twitter right now, many users are seeking alternative platforms, and rightfully so. If you’re looking to do the same, you’re probably wondering: Can anything really replace Twitter?

While Twitter has numerous advantages, some of its best aspects can also be found elsewhere. I did some digging and found several compelling alternatives to the social network. Here were some of the best.

more…

The post Thinking about leaving Twitter? Here are the best alternatives appeared first on 9to5Mac.

Not long after Elon Musk’s proposed Twitter verification overhaul made headlines, cybercriminals quickly began to take advantage of the situation in a round of phishing emails aimed at stealing the passwords of verified accounts.

more…

The post New phishing emails take advantage of Twitter’s ongoing verification mayhem appeared first on 9to5Mac.

Extensions continue to play a key part in adding third-party functionality to Safari. They’re often great ways to boost productivity, security, and privacy to a rather barebones browsing experience. But with the hundreds of Safari extensions available across different devices, it can feel overwhelming. Here’s a list of my top picks.