# data[].attributes.body
Apple broke some of my apps – let’s show how to fix them!

# data[].attributes.attachment_link.description
Patrick Wardle, Lead Security Researcher at Synack, describes how to ‘untranslocate’ or locally ‘undo’ one of Apple’s recent security mitigations.

# data[].attributes.body
PamStealer malware poses as a Mac clipboard app — and verifies your password before stealing it

# data[].attributes.attachment_link.readable_text
PamStealer disguises itself as Maccy, a popular Mac clipboard manager to trick users into handing over a verified password.
Photo: JAMF Threat Labs/Cult of Mac

The "free" clipboard manager you just downloaded could be doing more than just copying and pasting text. Researchers recently found a new malware called PamStealer disguised as Maccy, a popular clipboard tool, that does something most Mac malware doesn't bother with - checking your Mac password before sending it off.

The malware hides itself in a lookalike download for Maccy. It doesn't just grab your password and run - but it checks the password against the same system Apple uses to log you in.

How PamStealer disguises itself as a real Mac app

Many Mac users believe they are largely safe from malware because macOS includes built-in security features such as Gatekeeper, XProtect and app sandboxing, and historically it has been targeted by fewer cybercriminals than Windows. However, that doesn't mean Macs are immune to malware. As Apple's market share has grown, attackers have increasingly developed malicious software specifically for macOS. And that includes PamStealer.

To spread it, attackers built a lookalike website that mirrors Maccy's real page, according to Jamf Threat Labs. The only difference is that it hands out a disk image containing a file named Maccy.scpt.

Double-click it, and instead of installing an app, macOS opens it in Script Editor. This is where the real malicious code sits. The file tells victims to use Command-R to "install" it - triggering a hidden script that slips right past macOS's usual download warnings.

Why is PamStealer hard to catch?

The first stage is deliberately designed to be low-key. The malware dosen't rely on the obvious command-line tools security software keeps a keen eye on. Instead, it uses Apple's scripting framework to download a second payload.

Written in Rust, the payload then hides itself as Finder or Software Update, cleverly blending into background processes. Rust is rarely used by Mac malware and is notoriously hard to reverse-engineer.

The password trick makes it different

Here's the thing that sets PamStealer apart. The malware shows a dialog that looks exactly like a normal macOS permission request: "Maccy wants to make changes. Enter your password to allow this."

Type in the wrong password, and it asks again - because it is checking the password you typed locally against Apple's own Pluggable Authentication Modules system. Once the password is confirmed, it shows a fake "Maccy is damaged" error. Following this, your credentials get uploaded to a remote server.

It doesn't stop at stealing your password

From there, PamStealer settles in to your system. The malware monitors your clipboard over time and even adds itself as a login item to survive restarts. Before requesting Full Disk Access, the malware waits as long as 40 minutes - long enough that most people won't connect the prompt to the sketchy app that was installed earlier.

Jamf researchers also found out that it fingerprints your Mac, checking for Apple Silicon, keyboard layout and time zone before deciding to proceed further.

How to stay safe?

The developer behind the real Maccy app has already posted a warning about this, confirming maccy.app is the only legitimate source to download the app.

Ands remember how the fake app asks the user to hit Command-R to "install" it? Treat any installer that asks for a keyboard shortcut to "open" as a red flag - legitimate Mac software never does that.

Plus, as a general rule, only download Mac apps from the developer's own site, GitHub or the Mac App Store.

# data[].attributes.attachment_link.title
PamStealer malware poses as a Mac clipboard app - and verifies your password before stealing it

# data[].attributes.attachment_link.description
PamStealer, a fake version of the popular Maccy clipboard app, tricks Mac users into handing over a password that's already been confirmed to work.

# data[].attributes.attachment_link.title
Apple’s Hide My Email feature has an unfixed bug that leaves email addresses exposed

# data[].attributes.attachment_link.description
A year-old vulnerability in Apple’s Hide My Email can expose users’ real email addresses. Apple claimed to fix it in March 2026. Independent testing shows it wasn’t fixed.

# data[].attributes.body
A new unpatchable flaw in Apple chips opens the door to an iPhone jailbreak

# data[].attributes.attachment_link.title
ERROR: The request could not be satisfied

# data[].attributes.attachment_link.title
Get Your iPhone to Ask Callers Who They Are Before You Answer

# data[].attributes.attachment_link.description
Spam and cold calls have become such a nuisance that many people simply don’t answer their phone unless they recognize the number. In iOS 26,…

# data[].attributes.attachment_link.title
How Using A Private Network Address On iPhone Works (And Why You Should) - SlashGear

# data[].attributes.attachment_link.description
Looking to use a private network on your iPhone? There’s a variety of reasons you might want to use one, and it’s easier than you may think.

# data[].attributes.attachment_link.title
iOS 26.2 adds new ‘AirDrop codes’ feature, here’s how it works - 9to5Mac

# data[].attributes.attachment_link.description
iOS 26.2 is officially here, packing a bunch of new features, including ‘AirDrop codes.’ Here’s how the new AirDrop enhancement works.

# data[].attributes.body
iOS 26.2 adds new ‘AirDrop codes’ feature, here’s how it works

# data[].attributes.attachment_link.title
Meet the scammers driving your neighborhood

# data[].attributes.attachment_link.description
Ever get one of those weird texts that says something like, “Your package is waiting” or “Click here to unlock your cash reward”? We all have. Most people figure it’s just a scammy mass text from some sketchy website. You can’t be so sure anymore. What if I told you those shady texts didn’t come […]

# data[].attributes.attachment_link.title
Google issues emergency warning for all Gmail users

# data[].attributes.attachment_link.description
Google has sounded the alarm with an emergency warning to all Gmail users, urging extra caution amid a growing cyber threat linked to a major third-party breach. While the company stresses that its own systems remain secure, the incident has opened the door for hackers to exploit stolen data in new and deceptive ways. Here’s […] Read the original article here: Google issues emergency warning for all Gmail users

# data[].attributes.attachment_link.title
Alleged Verizon data breach sees 61M customer records offered for sale

# data[].attributes.attachment_link.description
An alleged Verizon data breach has seen hackers offering for sale a database of 61 million customer records, which includes…

# data[].attributes.attachment_link.description
Our systems have detected unusual traffic from your computer network. This page checks to see if it’s really you sending the requests, and not a robot. Why did this happen?

# data[].attributes.body
How to find your lost or stolen MacBook or Mac desktop

# data[].attributes.attachment_link.title
How to find your lost or stolen MacBook or Mac desktop

# data[].attributes.attachment_link.description
Find your lost or stolen MacBook by seeing its current location, playing a sound on it, putting it in Lost Mode, and more.

# data[].attributes.attachment_link.readable_text
Maritime security and awareness is critical to shoreline safety, security, law enforcement, border control and environmental protection. Anduril's family of systems, powered by Lattice, brings autonomous, accurate & persistent security to the seaside.

# data[].attributes.attachment_link.description
Anduril Industries, Inc. is an American defense technology company that specializes in advanced autonomous systems.

# data[].attributes.headline
 Brave search about how kids are bypassing parental controls

# data[].attributes.subject
 Brave search about how kids are bypassing parental controls

# data[].attributes.attachment_link.description
Kids can bypass parental controls through various methods, including using virtual private networks (VPNs) to mask their IP address and encrypt their internet traffic, making it difficult for parents to monitor or block their online activity[6][7]. They can also change DNS settings on their devices to access restricted content or websites[8]. Additionally, kids can use alternative browsers that mi…

# data[].attributes.attachment_link.readable_text
No matter what you've heard, Macs get viruses too. There are a handful of indicators that your Mac may be infected by malware: your computer running slower or working harder than usual (or overheating), apps or programs crashing unexpectedly, or unfamiliar software or processes running on your device.

Here's what to do if you suspect a malware infection on your Mac-and how to get rid of it.

Disconnect your Mac from the internet

An active internet connection may allow malware to spread across your network to other devices or communicate information to and from bad actors, ultimately making it more challenging to isolate and remove. If you need to download any programs to address a potential infection, such as a malware scanner, do it quickly.

Otherwise, cut your device off from the internet, and don't reconnect until you are sure the threat is gone. You should also avoid signing into any accounts that require credentials, as some malware includes keylogging capabilities that steal your passwords.

Restart in safe mode

When you restart in safe mode, your Mac prevents some software from loading and runs a check on your startup disk, allowing you to isolate and address potential issues. The process for entering safe mode depends on whether you have an Intel-based Mac or a Mac with Apple silicon. If you aren't sure what you're running, click on the Apple in the top left of your screen, then choose About This Mac to clarify. Apple silicon will be labeled as Chip, followed by an M-series processor (e.g. M1 or M2 Pro), while Intel Macs will be labeled as Processor.

To restart an Apple silicon Mac in safe mode, go to the Apple menu > Shut Down and wait for your device to turn off completely. Then press and hold the power button until Loading startup options appears. Select a volume (likely Macintosh HD for most) then press and hold Shift and click Continue in Safe Mode. When your device restarts, you'll see Safe Boot in the menu bar.

For an Intel-based Mac, restart your device and press and hold Shift until the login window appears. Log into your device, and you should see Safe Boot in the menu bar.

You can also confirm that you're in safe mode by pressing and holding Option, then choose Apple Menu > System Information > Software. Under System Software Overview, look for Boot Mode: Safe. If it says Boot Mode: Normal, you are not in safe mode.

Run a malware scan

Apple has built-in antivirus software called XProtect, but you can't run manual, on-demand checks with it. It may be best to use a second-opinion scanner to identify, quarantine, and remove whatever XProtect may have missed. Lifehacker sister site PCMag recommends BitDefender as the best antivirus software for Mac. If you're looking for free solutions, PCMag also recommends Avast and Malwarebytes for addressing malware infections.

Monitor your Mac's activity

Activity Monitor on macOS shows you real-time information about processes running on your device, including memory usage and activity across disks and networks. This is a good way to identify suspicious programs or processes that may be malware.

To open, go to Launchpad and search for Activity Monitor. Look for any unusual names or processes that are hogging CPU or memory, then double-click and quit them. You should also quit any applications that are currently running until you identify the source of the problem.

Reset your browser

Malware can also modify browser settings, so you should reset any browsers on your Mac to their defaults. Safari doesn't have a singular restore settings button, but you can manually reset it to its default by clearing browsing data.

On Chrome, open Settings from the three dots in the upper-right corner. Tap Reset Settings in the left toolbar and select Restore settings to their original default. Confirm with the Reset settings button. On Firefox, go to Menu > Help > More Troubleshooting Information and click Refresh Firefox > Refresh Firefox > Finish.

Also consider disabling and removing extensions you may not recognize, or believe may be slowing down your browser and Mac. You'll find them in Settings > Extensions ( Extensions & Themes on Firefox).

Remove temporary files

Malware may install temporary files on your Mac that allow it to operate or hide, so you can consider deleting these from your device. However, a good malware scanner should find these types of files on their own, so you shouldn't need to delete them yourself. If you don't know what you're looking for, you might end up deleting files that help your Mac run smoother.

If you want to delete these temporary files yourself, however, here's how: Open a Finder window and press and hold Shift + Command + G. Type ~/Library/Caches into the search bar to pull up temporary files, select any you want to delete to open them in a Finder folder, and press Command + Delete (or Control + click > Move to Trash) to move to Trash. You'll also want to empty the Trash to delete the files permanently from your device.

Restart (or reinstall) macOS

Once you are confident the malware threat has been eliminated, you can restart your Mac in its normal mode. However, if you believe or worry any remnants of malware are still present, you may need to get a fresh start by reinstalling macOS from Recovery.

While you can restore from a backup to make things the way they were before the reinstall, note that you should only do so if you are sure the backup was made before your device was infected with malware. If there's a chance you made a backup with the malware infection in place, don't use it.

# data[].attributes.attachment_link.description
No matter what you've heard, Macs get viruses too. Here's what to do if you suspect a malware infection on your Mac-and how to get rid of it.

# data[].attributes.attachment_link.title
Unknown numbers and spam on Telegram: how to block them quickly

# data[].attributes.attachment_link.description
Despite its Russian roots, Telegram is the most popular social network in Ukraine. We’ve created a guide that will help you quickly block unknown numbers and spam messages on Telegram, as well as protect you from unwanted communication.

# data[].attributes.body
Save your iPhone and Apple Account by setting up a recovery contact

# data[].attributes.attachment_link.title
Save your iPhone and Apple Account by setting up a recovery contact

# data[].attributes.attachment_link.description
If you’re scared of losing access to your Apple Account or iPhone, a recovery contact can remotely unlock your iPhone for you.

# data[].attributes.body
What to Do If Your iPhone Is Lost or Stolen

# data[].attributes.attachment_link.title
What to Do If Your iPhone Is Lost or Stolen

# data[].attributes.attachment_link.description
Discover the essential steps to protect your iPhone and personal data after loss or theft. Act fast with these expert tips for 2025.

# data[].attributes.attachment_link.title
New XCSSET malware adds new obfuscation, persistence techniques to infect Xcode projects | Microsoft Security Blog

# data[].attributes.attachment_link.description
Microsoft Threat Intelligence has uncovered a new variant of XCSSET, a sophisticated modular macOS malware that infects Xcode projects, in the wild. Its first known variant since 2022, this latest XCSSET malware features enhanced obfuscation methods, updated persistence mechanisms, and new infection strategies. These enhanced features help this malware family steal and exfiltrate files and system and user information, such as digital wallet data and notes, among others.

# data[].attributes.attachment_link.title
How To Set Up An Apple Recovery Key (And Why You Should) - SlashGear

# data[].attributes.attachment_link.description
Learn how to set up an Apple Recovery Key to secure your account and why it’s an essential step for protecting your Apple ID.

# data[].attributes.body
How To Set Up An Apple Recovery Key (And Why You Should)

# data[].attributes.attachment_link.description
‎Take control of your computers, wherever you are. Screens 5 lets you remotely access your Mac, Windows PC, Linux PC, or Raspberry Pi from anywhere-whether you're at home, in a coffee shop, or on the other side of the world. With speed, security, and reliability, Screens delivers a seamless remote d...

# data[].attributes.attachment_link.readable_text
Many websites and apps rely on a weak form of two-factor authentication (2FA) that involves texting you a short number or code. These sites and apps might also offer to make an automated voice call that reads the code aloud. If you're outside your home country or region and have an expensive fee per message to receive SMSes or per minute for voice calls or cannot receive them at all, you need an alternative.

Set up an app-based second factor in Passwords or elsewhere

Your best option is to upgrade account security for the service that currently sends you an SMS for verification. Look for a way to add two-factor authentication that might be labeled as specifically as "use Google Authenticator" (you can use other apps or Apple's Passwords app), shown as a QR code, or require navigating through security > two-factor authentication or other menus.

If this isn't an option, skip ahead.

At Google, for instance, you go to myaccount.google.com, click Security > 2-Step Verification; you may be prompted to authenticate. In this section, you can add a passkey (supported by Apple and managed in Passwords), which is a single-step login that combines two security factors, a hardware security key that you would need to carry with you, or Authenticator, which is a time-based one-time password (TOTP) system. You can have all three and more enabled for Google.

Passkeys are the easiest, as they replace a login and require no additional factors. The most common option, however, is the Authenticator/TOTP approach. A TOTP requires a secret shared by the account site and you. The secret allows the synchronized generation of a short code. When you're prompted for the code, your authentication app calculates one based on the current time, and, when you enter it, the account site can confirm it by running the same algorithm locally.

Apple managed this process extremely well once it started to support TOTPs, which it calls "verification codes." On an account enrollment page displaying a TOTP enrollment QR code, you can Control/right-click the code in macOS or touch and hold on a Code in iOS/iPadOS and choose Set Up Verification Code (or similar language). This adds the secret to Passwords for that site.

If that set of steps doesn't work correctly, the site should also let you see the raw secret text, a short string of letters and numbers. Copy that text. Open the Passwords app, search for the entry for the website or domain associated with the app that contains your login, click or tap Edit, click or tap Set Up Code, paste the code into the Setup Key field, and click or tap Use Setup Key. Click or tap Save.

When you next try to log into the site or app, Apple automatically generates a password prompt in the authentication code field. You're prompted for a fingertip, face, or password to fill in the generated code.

Get a Google Voice number for free incoming SMS and North American phone calls

Google still offers free Google Voice accounts for personal use, which provide a legitimate regular telephone number that can place and receive voice calls and send and receive SMS messages. Google doesn't charge for calls and texts that originate within the United States and you can call and text most numbers in those countries at no cost or low cost.

You may be able to change your SMS-receiving number in the account you want to verify when traveling to a Google Voice number. If you can set up multiple numbers of SMS codes, add a Google Voice number as a secondary one.

It may not work. As Google notes, "Some websites, such as banks or subscription services, won't send text messages to Google Voice numbers. In those instances, you may need to use your mobile carrier number." I have found in testing that advice to be mostly outdated but your particular financial or other services may still restrict known ranges of Google Voice numbers.

To make the process of receiving a code from Google Voice even easier, you can go to Settings > Messages at voice.google.com and enable "Forward messages to email." This sends any incoming text messages to your associated Gmail address. In my case, I have an additional forwarding rule at Gmail that sends the message on to my main mailbox.

In most cases, I receive a code in my inbox within a few seconds and at most a couple of minutes no matter where in the world I am.
This Mac 911 article is in response to a question submitted by Macworld reader Brian.
Ask Mac 911

We've compiled a list of the questions we get asked most frequently, along with answers and links to columns: read our super FAQ to see if your question is covered. If not, we're always looking for new problems to solve! Email yours to mac911@macworld.com, including screen captures as appropriate and whether you want your full name used. Not every question will be answered; we don't reply to emails, and we cannot provide direct troubleshooting advice.

# data[].attributes.attachment_link.title
How to find alternatives for verification codes when roaming

# data[].attributes.attachment_link.description
SMS remains a weak point in verifying logins and may be unavailable to you while outside your home country or region.

# data[].attributes.body
How to find alternatives for verification codes when roaming

# data[].attributes.body
How to Safeguard Your Most Important Logins with Apple's Passwords App

# data[].attributes.attachment_link.readable_text
You already know you should create unique passwords for every website to protect your sensitive information, but keeping track of them all is a burden. Apple created its own Passwords app to make it easy to securely store and easily recall them. You can finally ditch those sticky notes hanging from your computer.

Apple's new Passwords app brings all your passwords and passkeys under one secure umbrella and is available now in , iPadOS 18 and MacOS Sequoia. If you're ready to tame your tangle of passwords, this guide covers the main features of the Passwords app and how to easily access your critical information when you need it. It primarily covers Passwords from the point of view of the MacOS app, but the basics apply to the iPhone and iPad apps, too.

For more of what you can find in iOS 18 and MacOS Sequoia, read how to get more from your iPhone with nine unique iOS 18 features and eight real-world uses for iPhone mirroring in iOS 18 and MacOS Sequoia .

The Passwords app is the best kind of feature facelift

If the Passwords app sounds familiar, that's because storing passwords isn't new to Apple's operating systems. The app accesses a set of low-level Keychains that the operating systems use to store sensitive information such as credentials for websites and apps and security certificates.

Until now, this was difficult to access -- you had to open the more technical Keychain Access app (which is still available) or dig into system settings or Safari's preferences to find them.

The new Passwords app pulls all that data together into a simple interface that lets you add and edit passwords, generate automatic verification codes, create passkeys and share selected entries with other people. If you've used Apple's Reminders app, the look and approach will be familiar. If you enable iCloud Keychain (in Settings > [Your Name] > iCloud > Saved to iCloud > Passwords and Keychain), the encrypted data securely syncs to the Passwords app on each of your devices.

It runs as a standalone app and ties into Safari to autofill site passwords. You can also access your passwords from a menu bar item. If your preferred browser on the Mac is Chrome or a Chromium-based browser such as Opera, you can install the iCloud Passwords extension for Chrome; Apple doesn't offer an official add-on for Firefox or DuckDuckGo, so be mindful of extensions that claim to work with iCloud Passwords.

How to save a new website password in Safari

Most of your passwords are likely for signing into websites such as your bank, online stores and other outlets. When you sign up for an account at a new site using Safari, Passwords prompts you to create a randomly generated secure password. Choose Use Strong Password, which creates a new entry in the app.

The Passwords app doesn't need to be open for this to work, since it's integrated at the system level.

How to create a new password in the Passwords app

The advantage of having a standalone Passwords app is to give you a better way to create and manage these passwords. Most of the time you'll be prompted to create a new password, there will be times when you'll need to manually do it.

1. Open the Passwords app and authenticate with your system password, Touch ID, Face ID or device passcode.
2. Click the + button or choose File > New Password.
3. Enter a title for the entry.
4. Type your user name in the User Name field (which could be an email address, depending on what the app or service requires).
5. Click the Password field and choose a secure password option that appears. You can also type directly into the field, but too often people use easily guessed or repeated passwords -- stick with the randomized ones the Passwords app is suggesting.
6. If you have any other information, such as recovery codes or details about an app purchase, enter those in the Notes field.
7. Click Save.

When you create a password using this method, there's no Website field -- Passwords lean heavily on the process of capturing login information when you're using the site's fields to sign up or log in. You can add a link separately by clicking the Edit button in the entry you created and then typing or pasting the address in the Website field.

How to autofill your information using Passwords

The next time you return to a site and need to sign in, you'll be prompted to use Passwords to autofill your stored information. Select the account that appears in the pop-up and then authenticate using Touch ID or Face ID, depending on your device.

If the autofill prompt doesn't appear, go to the Passwords Menu Bar item and search for the site there. Select it and then click the User Name or Password fields (or one and then the other) to copy the content and paste it into your browser.

How to set up automatic verification codes

Having a secure password is just the first security step in this day and age. Many sites now recommend (or outright require) a two-factor authentication option as well. Sometimes this is the mobile number you use for texting to receive a one-time code that expires after a set amount of time. Or it could be an automatic verification code that randomizes every 30 seconds.

To set up 2FA on a site, sign in to it and access your account settings. Look for an option such as "Sign up for two-factor authentication" or similar. Enter your phone number or email address -- the type depends on what the site is using -- and send it. The site then sends a verification code in the method you supplied.

That might be all the site requires. The next time you sign in, you'll be prompted to authenticate using that method, in which case you'll get a new code.

The system can automatically delete a text message or email containing the code when you're done with it -- after all, that number combination will never work again. Go to System Settings > General > AutoFill & Passwords and turn on Verification Codes: Delete After Use.

There may also be another level of authentication that doesn't rely on sometimes spotty SMS networks and email servers. The site may accept a continuously changing code that is tied to your account, which can be generated at filled in using the Passwords app. Here's how to set that up:

1. In the two-factor authentication process, you'll likely be given a QR code to set up a verification code. Control-click the code and choose Set Up Verification Code from the contextual menu.
2. In the Passwords app, which automatically opens, select the entry for that site.
3. Click Add Verification Code.

Return to Safari and click the field asking for the verification code. A Passwords pop-up will appear for you to authenticate by entering the current code. If that doesn't appear, go to the Passwords app, click the Verification Code field and choose Copy Verification Code. Then paste it into the field in Safari.

The next time you log into that site, using Autofill will also apply the current verification code.

On the iPhone, the process is similar: When presented with a QR code, touch and hold it, then choose to Add Verification Code in "Passwords".

What are passkeys and how do I use them?

What if I told you we could just forget about passwords altogether? No more requirements that a password include at least 12 characters and numbers and special characters, not be a password you've used previously and also reference your favorite movie genre as expressed in prime numbers.

That's the promise of passkeys, a way of authenticating you using the secure hardware you're already using. With a passkey in place, you can sign into a site or app using Face ID or Touch ID on your iPhone, iPad, Mac or Vision Pro -- without typing a single character.

Setting up a passkey is similar to a 2FA method: Sign in to your account on a service that supports passkeys, view your account security settings and look for an option to create a passkey or security key. You'll get a prompt to store the passkey using Touch ID or Face ID (depending on the device you're using).

When you next sign in to that site, you won't see a password field at all: it prompts you to use the passkey instead.

Not only are they more convenient, but passkeys are also more secure. One of the biggest problems with passwords today isn't the danger that someone will somehow break into your devices and steal yours -- it's the industrial-scale theft of thousands or millions of passwords from the companies you've created passwords for as a result of hackers breaking into those servers. That's useful for sites such as Amazon, Shopify and Uber, for example, which contain valuable sensitive information about their customers and are frequent targets for hackers.

Share selected passwords in groups

Your passwords are private, but sometimes you need to share them with someone. For example, let's say you and your spouse share a login to access a regular food delivery service. You can add the site's login information to a shared group in Passwords so you both have access to it. If you need to change that password, it's automatically updated in the Passwords app on their devices too. If you're using a passkey on your devices, they can also log in using a passkey that's created for their devices, securely tied to their Apple Account.

Sharing passwords involves creating a new shared group and then adding passwords to it:

1. In the Passwords app, click the + button that appears when you move the pointer over Shared Groups, or choose File > New Shared Group.
2. Type a Group Name.
3. Click the Add People button and choose the person from your contacts. Repeat if you're creating a group with several people.
4. Click Create.
5. In the next screen, search for (or scroll to locate) the password you want to share, and click the checkbox for it. Repeat for all of the passwords to share.
6. Click Move.
7. Optionally notify the other person by sending them a text message. Click Notify via Messages. Or click Not Now to not send a text -- they will still see the group invitation in their Passwords app.

Share a single password with someone

One great new feature in Passwords is a handy way to share a Wi-Fi password without divulging the password itself: You show someone a QR code that grants them access.

You can also share a password with someone near you over AirDrop:

1. In the Passwords app, go to the password you want to share.

2. Click the Share button and authenticate to grant permission.

3. In the AirDrop window that appears, click the icon of the person near you.

When the other person accepts, the password is added to their Passwords app.

Import passwords from other services

What if you already use another password app, such as 1Password or Bitwarden? You can export your passwords into the Passwords app on the Mac. But there are a few caveats.

First, the Passwords app accepts only a CSV (comma-separated values) file, which is just a big unencrypted text file. Your current password tracker should be able to export the file, then go to File > Import Passwords in the Passwords app and select it.

Then, and this is crucial, remember to securely delete that CSV file so all your passwords aren't sitting around vulnerable. You can do that in the Finder by deleting the file, which puts it into the Trash. Next, open the Trash, right-click or Control-click the file and choose Delete Immediately.

The other thing to keep in mind about importing passwords is that not everything may come over. 1Password, for example, stores items such as secure notes and credit cards that are not imported into the Passwords app.

What the Passwords app doesn't offer

When Apple announced the Passwords app as part of iOS 18 and MacOS Sequoia, some people wondered if the company had just "Sherlocked" other password keepers. The term comes from an old MacOS feature called Sherlock, which lets you search your computer for more than just file names. Other search utilities did the same thing, but when Apple built the feature into the system, it killed the market for many of those third-party apps.

On the surface, it sure sounds like Apple Sherlocked utilities such as 1Password, Bitwarden and LastPass (although LastPass and its poor security have done more damage to itself). Although Passwords assumes the core functions of storing and applying passwords, other apps still have their own advantages:

Sharing between platforms: Other apps have iOS, MacOS, Windows and Android apps.

Sharing between family members on different platforms: Similarly, if you want to share passwords with someone who isn't in the Apple ecosystem, a third-party app is the alternative.

Other types of secure information: If you want to store sensitive data like notes, documents, credit cards and bank account numbers in one place, look to another app.

Extend Your MacBook's Battery Power Now With These 7 Tips

# data[].attributes.attachment_link.title
How to Safeguard Your Most Important Logins with Apple's Passwords App

# data[].attributes.attachment_link.description
Your complete guide to Apple's Passwords app.

# data[].attributes.attachment_link.title
DeepSeek’s Safety Guardrails Failed Every Test Researchers Threw at Its AI Chatbot — WIRED

# data[].attributes.attachment_link.description
Security researchers tested 50 well-known jailbreaks against DeepSeek’s popular new AI chatbot. It didn’t stop a single one.

# data[].attributes.attachment_link.title
How to Use Stolen Device Protection on Apple’s iPhone

# data[].attributes.attachment_link.description
Whether you’re worried about a new iPhone or the Apple smartphone you’ve had for ages, activating Stolen Device Protection can limit what thieves can access.

# data[].attributes.body
How to Use Stolen Device Protection on Apple’s iPhone

# data[].attributes.attachment_link.title
How to clear cookies and data of a specific website on Mac and PC

# data[].attributes.attachment_link.description
Learn how to delete cookies, cache, and other data of a particular website in Safari, Google Chrome, Firefox, Edge, and Brave browsers.

# data[].attributes.body
How to clear cookies and data of a specific website on Mac and PC

# data[].attributes.body
What are Security Responses & System Files on iPhone, iPad, and Mac

# data[].attributes.attachment_link.title
What are Security Responses & System Files on iPhone, iPad, and Mac

# data[].attributes.attachment_link.description
Learn how Apple’s Rapid Security Response system works to fix critical security issues by installing software update in the background.

# data[].attributes.body
How to spot and block scam texts on your iPhone

# data[].attributes.attachment_link.title
How to spot and block scam texts on your iPhone

# data[].attributes.attachment_link.description
Apple’s Messages app has a built-in safeguard to prevent links or phone numbers in unsolicited messages on iPhones from being clickable, and now scammers are trying to trick the unwary into enabling them.

# data[].attributes.body
USB-C vulnerability could result in new iPhone ailbreak techniques

# data[].attributes.attachment_link.title
USB-C vulnerability could result in new iPhone ailbreak techniques

# data[].attributes.attachment_link.description
A security researcher has worked out how to hack a proprietary USB-C controller used by Apple, an issue that could eventually lead to new iPhone jailbreaks and other security problems.

# data[].attributes.body
Scary reason why you should never answer if someone asks 'can you hear me' on the phone

# data[].attributes.attachment_link.readable_text
There's a four-word phone scam you should listen out for next time you pick up the phone to a number you don't recognize.
If you see a random number calling you, the likelihood is you feel anxiety rise deep within you, your hand whizzes out to silence the call and unless they leave a message, you try your best to forget about the mortifying experience of someone trying to speak to you over the phone and carry on with your day - no? Just me?

However, should you be one of the brave people who does dare answer the phone in this day and age, heed this warning - should you hear someone ask you if you can 'hear' them, alarm bells should start sounding within your brain.

Phone call scams have increased by a whopping 118 percent in the past year, Reader's Digest reports.

And while many of us are fine-tuned to the texts pretending to be from a delivery service or a phishing email, phone calls can be a bit harder to spot when a scam is occuring.

Millions of Americans have fallen victim to phone scammers using AI looking to steal their money and identities, First Orion warns.

Adam Gordon, an instructor at ITProTV who also provides IT training, says all phone scams are 'designed to do two things: gain information about you that can be used to impersonate you [through] identity theft, and get you to give money to the scammer'.

And one particular phone scam sees a recorded voice ask: "Can you hear hear me?"

But what's so bad about that? I hear you say.
Maybe us anxious phone callers have a point eh? (Getty Stock Images/ Calvin Chan Wai Meng)
Well, the phrase is designed to trick the victim into saying 'yes'.

"This phone scam is particularly frightening [because] they simply rely on the human behavior of answering a quick question," says Matthew Shirley, director of offensive cybersecurity operations at Fortalice added.

From there, scammers could use the recording of you saying 'yes' to pretend to be you to make purchases and access more information.

This comes after an iPhone user 'lost everything' when they downloaded a 'scam' App Store app.

Last month, a fake cryptocurrency app claiming to be affiliated with Bitcoin wallet Leather was circulating and could be found on the App Store.
Be careful what you answer on the phone (Getty Stock Images/ ArtMarie)
The app was causing chaos across the web, as it was apparently robbing people of their digital assets.

Published by a developer called LetalComRu, the app uses the Leather logo.

So, it led to many believing the app was genuine and subsequently downloaded the app.

Adding further to the legitimacy, the makers of the app even collected fake reviews, making suspicions even lowered for many.

Apple has since confirmed to iMore that the fake app has indeed been removed.
Featured Image Credit: Lumi Nola/d3sign/Getty Images

# data[].attributes.attachment_link.title
Scary reason why you should never answer if someone asks 'can you hear me' on the phone

# data[].attributes.attachment_link.description
There's a four-word phone scam to keep an ear out for and never reply to

# data[].attributes.attachment_link.title
iPhone user ‘lost everything’ after downloading ‘scam’ App Store app

# data[].attributes.attachment_link.description
The fake App Store app has scammed a lot of people.

# data[].attributes.body
How to make iCloud more secure with Advanced Data Protection

# data[].attributes.attachment_link.title
How to make iCloud more secure with Advanced Data Protection

# data[].attributes.attachment_link.description
Advanced Data Protection encrypts many types of iCloud data: photos, notes, backups and more. Here’s how to activate the feature.

# data[].attributes.attachment_link.readable_text
* This article is from our Tip of the Day newsletter. Sign Up. *

Want to find out which of your contacts or apps has access to your private data? There is a handy iPhone security check feature that allows you to review all of your contacts and apps, and revoke access to private information, such as your location, photos, Bluetooth, and more. Find out how to run a security check on iPhone below.

Why You'll Love This Tip:

Check which of your contacts has access to private data like location or photos.

Revoke privacy access from apps that you don't want tracking your location or other information.

How To Run a Security Check on iPhone

System Requirements
This tip works on iPhones running iOS 17 or later. Find out how to update to the latest version of iOS.
The iPhone's security checkup feature allows you to quickly review all of your contacts and see who has access to what. Then, you'll be able to go over all your apps and see what privacy-related data they have access to. Throughout the process, you'll be able to revoke access with a simple tap. Here's how to run a security check on iPhone:

You can then select from the list of apps for which you want to stop access.

That's how to use the iPhone's Safety Check feature. Next, find out how to do an Emergency Reset on your iPhone using Safety Check.

# data[].attributes.attachment_link.title
Review Who Has Access to Your Private Data

# data[].attributes.attachment_link.description
Want to find out which of your contacts or apps has access to your private data? There is a handy iPhone security check feature that allows you to review all of your contacts and apps, and revoke access to private information, such as your location, photos, Bluetooth, and more.

# data[].attributes.body
Review Who Has Access to Your Private Data

# data[].attributes.attachment_link.readable_text
A firewall is an essential security tool for your Mac. Not only does it help keep your Mac safe from security threats online, but it also improves your privacy by allowing you to keep an eye on data that's sent and received from the internet. In some cases, this data sharing is essential, such as during a software update for your Mac. In other cases, it could be used by a malicious app to send your private data to servers on the other side of the world. With a firewall, you can stop that from happening.

What is a firewall?

A firewall is a tool that allows you to keep an eye on network traffic that's sent from and received by your computer. You can think of it as a gate between your computer and the internet. Without a firewall, all apps have unrestricted access to the internet, but when you use a firewall, these apps will have to ask for your permission before they can phone home.

A firewall can be a hardware tool or a software utility. Most of us have already used hardware firewalls, because modern routers have firewall features built-in. By default, they can block incoming connections, and some of the more expensive routers even let you block outgoing connections.

Hardware firewalls can protect all devices on your network, and unlike software firewalls, they can't be disabled easily by malware on any one computer. A software firewall, on the other hand, is a gatekeeper between your computer and the internet, which means that it's better suited to controlling connections for individual apps on your computer.

Should I use a software firewall?

Although software firewalls are great for privacy and security, they are not for everyone. I think everyone should use a firewall, but the reality is that some people will find firewalls a bit restrictive because you'll have to approve every single incoming and outgoing connection. That said, you can set up rules to ensure that the firewall doesn't get in the way.

How does a firewall work?

By default, your Mac will allow all network traffic to reach your computer, and it'll allow almost all apps to send data out. When you enable a strong firewall, you'll have to approve nearly every single request for incoming and outgoing traffic. This includes an app's checks for software updates, downloads, uploading data, and pretty much anything that requires you to connect to the internet.

Firewalls support a stealth mode, which follows your preset instructions without any prompts, but even that is restrictive because you may not be able to use the internet as freely as you'd like to. The flip side is that you're far more protected from cybersecurity threats or, at least, you become very well aware of every connection your Mac makes to the internet.

How can I use the Mac's firewall?

Your Mac ships with a firewall, but it is disabled by default and it can only monitor incoming connections to the computer. It doesn't allow you to control outgoing traffic. You can try using your Mac's firewall to see if you like it, but I have recommendations for third-party apps from reputed developers, which make it a lot easier to both use a firewall and enjoy the security and privacy benefits. On your Mac, click the Apple logo in the top-left corner of the screen and go to System Settings. Now, navigate to Network > Firewall and enable Firewall.

You can click the Options button on this page to set up the firewall to your liking: You'll see an option to allow built-in software to receive incoming connections (i.e. Apple's own software), as well as any signed software you've downloaded. Those apps are usually quite safe, since Apple vets the developers that have their apps "signed." You can also choose whether or not to allow incoming connections to a variety of apps and services, but you'll quickly notice that you can't control outgoing connections, which means if a shady app wants to send your data to an obscure server, you can't use the built-in firewall to stop that.

Which firewall apps should I use?

Fortunately, there are some great third-party firewall apps for the Mac. Little Snitch is the one I like the most: It has a solid set of features, such as the ability to monitor and block any kind of traffic on your Mac; blocklists that automatically keep trackers at bay; and a great interface that provides useful information and makes things easy to understand. As much as I like this app, it is pricey at $59, which means it may not be for everyone.

You can also try a cheaper alternative, such as Radio Silence, which Lifehacker has recommended before. It may not have the polished interface and all the features of Little Snitch, but it will do the job a firewall should: let you stop apps from phoning home. The app is good at its job and costs $9, which makes it a great option for those who want a firewall on a budget.

Finally, there's also a completely free firewall app for the Mac called LuLu. I'm usually wary of recommending free apps that serve such a critical security purpose, but LuLu has earned the trust of the community. It's free and open source, and you can take a look at its GitHub page to learn more about the app. It's in active development at the time of writing, which is also a bonus, since sometimes apps like these are abandoned and never updated again. The interface isn't as polished as that of the paid apps I've recommended, but it works well and you can use it to see if a firewall app is for you.

# data[].attributes.attachment_link.title
You Should Use a Firewall on Your Mac (but Not Apple's)

# data[].attributes.attachment_link.description
A firewall helps you protect your privacy and improves the security of your network. I explain what a firewall is, what it can do, and help you decide if you should use a software firewall on your Mac.

# data[].attributes.body
You Should Use a Firewall on Your Mac (but Not Apple’s)

# data[].attributes.attachment_link.readable_text
When you set up a new Mac, security may not be the first thing on your mind, but it should be. While Macs are known for their strong built-in defenses, it's just a myth that they're immune to threats. Cybercriminals are constantly evolving their tactics, and even Mac users aren't entirely safe from phishing scams, ransomware, or unauthorized access. That's why it's crucial to make sure your device is properly configured to protect your data and privacy.

Thankfully, macOS offers several customizable security settings you can tweak to beef up your system's defenses. We'll go over six key settings you should consider for better protection. By configuring them appropriately, you'll keep your data safe and reduce the risk of breaches. Keep in mind that not every setting will be necessary for everyone, so you can select the ones that best align with your usage and lifestyle.

Disable automatic connection to Wi-Fi networks

Your Mac keeps track of every Wi-Fi network you've connected to so that it can automatically reconnect when you're in range. This feature can expose your device to malicious activity, especially if you've used public Wi-Fi. Public networks are notoriously unsafe (although you can safely work from a coffee shop or public location with some precautions), and hackers can exploit them to identify your device through its saved network name (SSID). From there, they can intercept your traffic and potentially access sensitive data. The risks are especially high if you've been browsing private accounts or personal information, which is one of the big mistakes people make while connected to public Wi-Fi.

To avoid this vulnerability, it's safer to turn off the automatic join feature. Just go to System Preferences > Networks, select the network, and uncheck "Automatically join this network." It might be a little annoying to connect to public Wi-Fi manually, especially if you use the same ones often, but the extra layer of security you get is well worth it.

# data[].attributes.attachment_link.title
6 Security Settings To Change On Your New Mac - SlashGear

# data[].attributes.attachment_link.description
If you're a first-time Mac user or you just upgraded your device, these six steps are essential to protecting your device from hackers and abuse.

# data[].attributes.body
6 Security Settings To Change On Your New Mac

# data[].attributes.body
Apple Vision Pro’s Eye Tracking Exposed What People Type

# data[].attributes.attachment_link.title
Apple Vision Pro’s Eye Tracking Exposed What People Type

# data[].attributes.attachment_link.readable_text
Security researchers have discovered new macOS malware that's built to steal your most sensitive data. Dubbed 'Cthulhu Stealer,' the malware targets users by impersonating popular apps so it can harvest your system password, iCloud Keychain passwords, cryptocurrency wallets, and more.

Cthulhu Stealer malware threat

Cthulhu Stealer has reportedly been available since late 2023 as a $500/month paid service for bad actors. It can be especially effective because of how well it disguises itself as legitimate software.

Ravie Lakshmanan writes for The Hacker News:

Some of the software programs it impersonates include CleanMyMac, Grand Theft Auto IV, and Adobe GenP, the last of which is an open-source tool that patches Adobe apps to bypass the Creative Cloud service and activates them without a serial key.

Users who end up launching the unsigned file after explicitly allowing it to be run - i.e., bypassing Gatekeeper protections - are prompted to enter their system password...In the next step, a second prompt is presented to enter their MetaMask password. Cthulhu Stealer is also designed to harvest system information and dump iCloud Keychain passwords using an open-source tool called Chainbreaker.

The stolen data, which also comprises web browser cookies and Telegram account information, is compressed and stored in a ZIP archive file, after which it's exfiltrated to a command-and-control (C2) server.

According to Lakshmanan, the threat actors behind Cthulhu Stealer are no longer active. However, the software can still do just as much damage in other malicious users' hands.

Mac users generally don't receive as many invasive efforts from the hacker community as Windows and Linux systems. Cthulhu Stealer, however, seems built to take advantage of the sense of security macOS can sometimes provide.

It's not uncommon for lots of Mac users to routinely bypass Gatekeeper's protections. Apple is trying to change that in macOS Sequoia. But the fact remains that posing as known apps can be an effective way for malware to infiltrate Mac systems and harvest users' data.

One way to keep yourself safe from such threats is to prioritize downloading apps from the Mac App Store, and known third-party platforms. Popular developers' official websites are another generally safe place to get your software.

9to5Mac's Take

Cthulhu Stealer, and other software threats like it, can do far less damage when users take macOS's security features seriously. So the next time you're tempted to bypass Gatekeeper and open a new app downloaded from the web, be sure you know where it's sourced from.

For more information on Cthulhu Stealer, I recommend reading the full Hacker News article.

Have you encountered Cthulhu Stealer or other malware like it? What are your security best practices? Let us know in the comments.

FTC: We use income earning auto affiliate links. More.

Ryan Christoffel iryantldr

# data[].attributes.attachment_link.title
macOS malware Cthulhu Stealer impersonates apps then steals your data

# data[].attributes.attachment_link.description
A new macOS malware has been discovered, Cthulhu Stealer, that impersonates popular apps to gain access to your personal date.

# data[].attributes.body
New macOS malware impersonates popular apps then steals your data

# data[].attributes.attachment_link.readable_text
Cybersecurity group Cisco Talos identified vulnerabilities in Microsoft apps for Mac that could leave you vulnerable to hackers. According to the group, some Microsoft apps can be exploited and let hackers inject malicious libraries to gain entitlements and user-granted permissions, such as microphone access, camera, folders, screen recording, user input, and more.

Cisco Talos says there are eight vulnerabilities in various Microsoft Mac apps that let attackers bypass the operating system's permission model by using app permissions without prompting the user for any additional verification.

The group gives some examples: "An attacker could send emails from the user account without the user noticing, record audio clips, take pictures, or record videos without any user interaction." Interestingly, Microsoft considers these issues low risk, as the company claims users "need to allow loading of unsigned libraries to support plugins" and has declined to fix them.

According to Cisco Talos, Microsoft Outlook, Teams, PowerPoint, OneNote, Excel, and Word could be hacked because they use a feature called com.apple.security.cs.disable-library-validation entitlement. It could turn off security features and make apps vulnerable to library injection attacks.

Tech. Entertainment. Science. Your inbox.

Sign up for the most interesting tech & entertainment news out there.

By signing up, I agree to the Terms of Use and have reviewed the Privacy Notice.

Fortunately, in a lengthy blog post, the company explains that macOS offers enough protection, and users are unlikely to suffer from this attack. However, when an app is downloaded outside the Mac App Store, it makes it more possible for a hacker to bypass the app and Mac security and perform this attack.

The best way to protect yourself is to keep your Mac and Microsoft apps updated. Avoiding installing plugins for Microsoft apps could also help prevent security flaws on the Mac.

Also, it seems this attack hasn't been exploited, and regular users shouldn't worry too much about it. That said, you should always check your Mac's Settings to ensure only the apps you trust can access your microphone, camera, folders, and more.

# data[].attributes.attachment_link.title
Security flaws in Microsoft Mac apps could let hackers spy on you

# data[].attributes.attachment_link.description
Microsoft apps have several security flaws that could make your Mac vulnerable to hackers. Here's what you can do to protect yourself.

# data[].attributes.body
Security flaws in Microsoft Mac apps could let hackers spy on you

# data[].attributes.body
How To Fix The 'Content Loading Privately' Error On Your Mac

# data[].attributes.attachment_link.readable_text
Kaspars Grinvalds/Shutterstock

Some Mac users have been encountering an error when they attempt to check their email using the Mail application that comes with the Apple OS software. The problem in question prevents the recipients of emails who are using the Mail app from being able to view images and other media files that may be embedded in the body of the email. This is accompanied by a message that states, "Your network preferences prevent content from loading privately." Reports state that this message usually comes with an option to "Load content directly." This reveals the images, but it must be done every time you open a new email. This can be immensely frustrating, but it isn't actually an error-it's a part of the application's security settings.

Still, sometimes these kinds of settings can ruin the experience of using your Mac. If you've encountered this message, then you might be interested in learning what it is, what's causing it, and how you might be able to fix it. There are a couple of different things that might be causing this message to appear. It may have to do with a VPN that you're using or it might simply be a reflection of your security settings in the Mail application. Fortunately, both of these scenarios can be solved through relatively simple processes.

Try turning off your VPN

A9 STUDIO/Shutterstock

VPNs are great for privacy. They can help you prevent companies and other third parties from being able to monitor your internet activity, and they can allow you to stream content that might be regionally restricted. They've grown increasingly popular as home cybersecurity has become an ever-growing concern, but they can sometimes cause a few unexpected glitches. Programs that are designed to protect your information are often triggered by suspicious activity, and log-ins from a roving series of IP addresses from all over the globe is exactly the sort of thing that triggers these protections.

There have been some reports that suggest using a VPN might cause the Mail app to institute changes in your security settings that are designed to prevent your email from being hacked. In this instance, the "network preferences prevent content from loading privately" error, may actually be the Mail app attempting to protect your information from what it suspects is illicit activity.

Turning the VPN off will allow the Mail app to once again find your home IP address, but it won't change the setting back on its own if it has been altered. So you may still need to do that manually.

Uncheck Hide IP Address

Svariophoto/Getty Images

The main source of the "network preferences preventing content from loading privately" error is the Mail app's own Privacy settings. These can be altered by the use of a VPN, (as mentioned above,) but you may also have inadvertently changed this setting yourself during installation or an update if you selected the option to "Protect Mail Activity." According to Apple's support website, this "Hide(s) your IP address from senders and privately download(s) remote content in the background when a message is received (instead of when you view it). This option prevents senders from collecting information when you view a message, such as when and how many times you view it, whether you forward it, your IP address, and other data." Choosing this automatically selects the option to hide your IP address, which is good for the security of your email, but results in the images and other media files being hidden until you choose to directly load the email's content.

Turning this off is pretty easy though. You just need to open the Mail app on your Mac, choose the "Mail" tab at the top of the screen, and then navigate to "Settings." This should open a new window. Select the "Privacy" tab at the top of this window and then make sure that the box labeled "Hide IP Address" is unchecked. Quit and restart the app, and your emails should go back to opening with all content displayed like normal.

# data[].attributes.attachment_link.title
How To Fix The 'Content Loading Privately' Error On Your Mac - SlashGear

# data[].attributes.attachment_link.description
"Content Loading Privately" is a message you might see on your computer's Maill app when reading your mail. Here's what that means, and how to fix it.

# data[].attributes.body
How to check if you've been exposed in that big data breach

# data[].attributes.attachment_link.readable_text
A massive lapse of security at National Public Data has resulted in the theft of a wide array of personal data - including social security numbers - for almost every American. You can't rewind time to prevent the theft, but there are ways to check if you've been exposed.

National Public Data, a company specializing in background checks, confirmed a significant data breach. Hackers infiltrated their database, stealing personal information like names, addresses, and SSNs. The 277GB database is now available for download on a notorious cybercriminal forum, making it a goldmine for identity thieves.

The breach is massive, with 272 million unique social security numbers and 600 million phone numbers. It's twice as large as the infamous Equifax breach in 2017.

How to check if you were affected

Two cybersecurity firms have stepped up to help people determine whether their personal information was exposed in the breach.

Atlas Privacy Data Corporation has created a website, npdbreach.com, which allows users to check if their SSN, phone number, or name and ZIP code are included in the breached database. The site doesn't store user searches, ensuring privacy while investigating.

The company says 20% of breach records are legitimate but warns that not all information is accurate.

Another cybersecurity company, Pentester, has also launched a site at npd.pentester.com. The platform provides a more detailed view by revealing a user's redacted SSN, date of birth, complete address, and phone number.

While this can help users confirm whether the information is theirs, it also risks exposing partial data that others could exploit. Pentester notes that they've limited the data shown on the site to balance between providing useful information and protecting user privacy.

Despite the breach's magnitude, National Public Data only acknowledged 1.3 million users affected, which seems low given the leaked data.

To protect yourself, place a free credit freeze and fraud alert with the major credit bureaus - Equifax, Experian, and TransUnion. A freeze can prevent unauthorized people from opening new accounts in your name.

# data[].attributes.attachment_link.title
How to check if you've been exposed in that big data breach

# data[].attributes.attachment_link.description
A massive lapse of security at National Public Data has resulted in the theft of a wide array of personal data - including social security numbers - for almost every American. You can't rewind time to prevent the theft, but there are ways to check if you've been exposed.

# data[].attributes.attachment_link.title
Banshee Stealer malware aims to rob data from macOS browser extensions

# data[].attributes.attachment_link.description
Security researchers have discovered a new malware for macOS, which can be used to attack over 100 browser extensions that may be installed on the target Mac.

# data[].attributes.body
Banshee Stealer malware aims to rob data from macOS browser extensions

# data[].attributes.body
Understanding built-in network security features for Apple devices

# data[].attributes.attachment_link.readable_text
Apple devices use many common internet security standards. Here's what each of them does, and how to use them on your Mac, iPhone, or iPad.

In the networked world we live in, internet connectivity is ubiquitous.

Keeping network communications secure is one of the most important aspects of internet technology. Over the decades, several different standards have evolved to keep networks and devices secure.

In this article we'll look at several of these standards, and how they relate to Apple devices.

IPsec, IKEv2, L2TP

Three key technologies are used for secure connections and VPNs: IPsec, IKEv2, and L2TP.

IPSec is a security standard which was born of early DARPA ARPANET research. It was later formalized by MIT, Motorola, and NIST.

IPSec is mostly used by VPNs, providing secure authentication, key exchange, encryption, and data integrity functions. If you've ever installed VPN software on one of your Apple devices, you've used IPSec.

It is considered a "Layer 3" protocol which sits atop Layer 2 protocols, which we'll see in a moment.

IKEv2 is the Internet Key Exchange protocol. There are three versions this protocol: IKE, IKEv1, and IKEv2.

It is used in IPSec and by DNS to create and exchange secure key pairs during connections. Shared keys are part of Public Key Infrastructure (PKI) which eliminates the need for passwords.

IKE is based on two earlier protocols: The Oakley protocol and ISAKMP. These protocols came out of efforts in the late 1990's to secure internet connections when it became clear early internet communications were insecure in many instances.

The Oakley protocol uses the now-famous Diffie-Helman Key Exchange algorithm to securely exchange keys for encryption.

ISAKMP is a key exchange framework that provides a security association and keys to be used by key exchange protocols such as IKE. Cisco adopted both the Oakley and ISAKMP protocols for use in most of its VPN and router products.

There are other key exchange protocols, such as Kerberized Internet Negotiation of Keys (KINK) and SKEME.

L2TP, or Layer 2 Tunneling Protocol is a tunneling protocol used for control messages during network communication. L2TP doesn't secure or encrypt data or content itself, it only encrypts the control signals used in connections.

This protocol was formalized in 1999 in the RFC 2661 specification which was formed as a result of Cisco's L2F protocol and Microsoft's PPTP protocol. It also uses the User Datagram Protocol (UDP) during packet transmission.

UDP has the main advantage of being an acknowledgment-free broadcast protocol, for which listeners wait on a certain port for information without having to reply to the sender.

L2TP came about as a need for security for PPP (Point-To-Point Protocol) when dial-up modems were still in widespread use. Data packets can be transmitted over a Layer 2 tunnel by using one of the other additional encrypted protocols.

Secure tunneling ensures any data traveling in the tunnel is encrypted and controlled between only two points. This makes replay and man-in-the-middle attacks difficult for attackers to execute.

L2TP is used mostly in corporate VPNs for secure access.

Many VPN apps are available for Apple devices, via the App Store. Most Apple operating systems also provide built-in features for easily adding VPN profiles to devices.

IPsec, IKEv2, and L2TP operate mostly behind the scenes, and unless there's some specific setting you need to change, you'll usually never need to bother yourself with them.

TLS, SSL, and X.509 certs

When the web first went mainstream in the late 1990s, it quickly became apparent that all web communication needed to be encrypted. All so that data couldn't be intercepted and listened to between browsers and servers.

As a result Secure Sockets Layer (SSL) was developed. Now called Transport Layer Security, this protocol encrypts most traffic between web browsers and servers.

The "s" in "https" stands for "secure" - and indicates that you are browsing a website via a secure connection.

SSL/TLS can also be used in some secure email communications. TLS was also proposed in 1999 and has undergone three revisions, the current version of which is TLS 1.3.

SSL was originally developed in 1994 for the first versions of Netscape's Navigator browser, which today has morphed into Mozilla Firefox. There is also a Datagram Transport Layer Security (DTLS) protocol.

TLS uses X.509 certificates to exchange information using encryption and encrypted handshakes. Once the handshake completes, the server usually provides the client app with a certificate so sever can be trusted.

X.509 certificates allow a client app to verify the authenticity of the server, so that impersonation attacks can't work. The X.509 standard is defined in RFC 5280 by the International Telecommunications Union (ITU).

The major benefit of TLS is that it prevents anyone who might be listening in on the data exchange from being able to read the data in the clear. All due to it being encrypted.

In most cases, modern Apple devices and most software running on Apple devices automatically know how to use TLS, so you shouldn't need to worry about it. As long as you use an "https" connection when browsing the web, TLS is automatic.

Some email client apps such as Mozilla Thunderbird allow you to specify TLS/SSL as the communication security standard:

WPA/WPA2/WPA3 Enterprise and 802.1X

When WiFi networking first appeared at the end of the last century, a new security standard, WEP (Wired Equivalency Privacy) was developed to allow wireless networks to connect to other devices securely.

WEP had serious security flaws, and in response, Wi-Fi Protected Access (WPA) was produced. This protocol has undergone three revisions since the early 2000s, with the current version being WPA3.

Most modern WiFi devices, including Apple's devices, provide WEP3 for connections.

Both Apple's WiFi and Ethernet devices also provide for connections that use another security protocol called 802.1X. This protocol is part of the 802 network standard as defined by IEEE, which covers both WiFi and Ethernet wired networks.

802.1X prevents a type of network attack known as Hardware Addition, where a malicious device is used to attach to a network and perform hacking activities. For example, a small computer like a Raspberry Pi plugged into a spare network port.

Via the use of an authentication server, 802.1X can usually thwart such attacks by authenticating the user via WiFi, LAN, or WAN.

In today's world of devices everywhere, Hardware Addition attacks are much more common than they used to be.

WPA is no longer supported by modem versions of Apple's operating systems, so in most cases, you'll want to use WPA2, WPA3, or some variant thereof.

Login Window Mode (LWM) is a way to connect to a secure network from the Mac's login window if the network supports Directory Services.

In order to use LWM, you need a connection to an Active Directory or Open Directory server. You will also need an installed Mac network configuration profile which enables LWM for the network you're trying to connect to.

Once configured, at the Mac Login Window, select Other from the list of users, then enter your Directory Services user name and password. From the popup menu, select the network interface you want to connect on (WiFi or Ethernet).

Active Directory and Open Directory are technologies that allow user information and credentials to be stored on a central server for authentication.

In most cases, Apple has made network security seamless so you usually won't need to worry about it. The above technologies are mostly all part of web or internet standards, and in most software their use is automatic.

# data[].attributes.attachment_link.title
Understanding built-in network security features for Apple devices

# data[].attributes.attachment_link.description
Apple devices use many common internet security standards. Here's what each of them does, and how to use them on your Mac, iPhone, or iPad.

# data[].attributes.attachment_link.readable_text
1Password has shared that its software for Mac has a vulnerability that exposes users to a potentially serious threat. Along with attackers being able to compromise credentials, the flaw can give bad actors access to your account unlock key.

1Password revealed the details of the flaw in a security post. Fortunately, the vulnerability hasn't been reported as exploited in the wild - but it's still important to update your software to make sure you're safe.

An issue has been identified in 1Password for Mac that affects the app's platform security protections. This issue enables a malicious process running locally on a machine to bypass inter-process communication protections.

This issue was responsibly disclosed to us by Robinhood's Red Team after they chose to conduct an independent security assessment of 1Password for Mac. 1Password has received no reports that this issue was discovered or exploited by anyone else.

How to make sure 1Password for Mac is safe

The company says all users running 1Password 8 for Mac before version 8.10.36 (July 2024) are affected.

Fortunately, version 8.10.36, available now, fixes the vulnerability. So be sure to check what build you have installed.

Here's how the flaw works:

To exploit the issue, an attacker must run malicious software on a computer specifically targeting 1Password for Mac. An attacker is able to misuse missing macOS specific inter-process validations to hijack or impersonate a trusted 1Password integration such as the 1Password browser extension or CLI.

This would permit the malicious software to exfiltrate vault items, as well as obtain derived values used to sign in to 1Password, specifically the account unlock key and "SRP-𝑥". Learn more on page 19 of 1Password Security Design.

FTC: We use income earning auto affiliate links. More.

Michael Potuck michaelpotuck

Michael Potuck's favorite gear

# data[].attributes.attachment_link.title
1Password 8 for Mac flaw allows attackers to steal credentials, here's how to patch it - 9to5Mac

# data[].attributes.attachment_link.description
1Password has shared that its software for Mac has a vulnerability that exposes users to a potentially serious threat. Along...

# data[].attributes.body
1Password 8 for Mac flaw allows attackers to steal credentials, here’s how to patch it

# data[].attributes.body
macOS Malware Disguised as The Unarchiver App Steals Keychain Data

# data[].attributes.attachment_link.readable_text
A recent investigation uncovered a malicious website mimicking the legitimate The Unarchiver app, aimed at stealing macOS user data.

Researchers at Hatching Triage found the domain tneunarchiver[.]com, which perfectly replicates the real theunarchiver[.]com, save for a deceptive download button.

The Unarchiver is a popular macOS utility for extracting various archive formats and is widely trusted and used. This makes it an attractive target for cybercriminals aiming to exploit its reputation to distribute malware.

Users expecting to download a reliable tool could inadvertently compromise their systems by downloading from the spoofed site.

The fraudulent site lures users to download a disk image file named TheUnarchiver.dmg. Despite Hatching Triage identifying the domain as probable phishing, the file itself received a low threat score (1/10), and VirusTotal did not flag it as malicious. These findings prompted a deeper analysis to uncover any hidden threats.

Disk Image and Mach-O analysis

Mounting the disk image using hdiutil and examining it revealed an unsigned binary named "CryptoTrade," which deviates from the expected "The Unarchiver." Using Patrick Wardle's "WhatsYourSign" tool confirmed the absence of a valid signature, further raising suspicions.

The analysis of the CryptoTrade file using otool and other terminal commands revealed it as a universal binary, capable of running on both Intel and ARM architectures. The primary configuration file, info.plist, indicated the malware was compiled on macOS 14.5, highlighting potential compatibility issues that might have affected detection scores in the Hatching Triage sandbox, which runs macOS 10.15.

A closer inspection of CryptoTrade's shared libraries and method names indicated the presence of a password prompt, suggesting the malware attempts to capture user credentials during installation. Additionally, the malware connects to a URL (https://cryptomac[.]dev/download/grabber.zip) to download further malicious payloads.

Grabber.zip and Shell script

The downloaded grabber.zip file, containing multiple shell scripts, also went undetected by VirusTotal. These scripts, explicitly named for their functions, aim to collect and exfiltrate user data.

The main.sh script sets up a directory, collects the user's public IP address, and runs several scripts to gather documents, browser data, keychain information, and cryptocurrency wallets. The send.sh script packages the stolen data into a zip file and sends it to a specified URL (http://81.19.137[.]179/api/index.php).

One of the scripts, grab_apps.sh, included Russian comments, suggesting the malware's author might be from a Russian-speaking region.

To avoid falling victim to macOS malware, ensure the software you download comes from the official project's domain, or use the Mac App Store.

# data[].attributes.attachment_link.title
macOS Malware Disguised as The Unarchiver App Steals Keychain Data

# data[].attributes.attachment_link.description
A recent investigation uncovered a malicious website mimicking the legitimate The Unarchiver app, aimed at stealing macOS user data.

# data[].attributes.attachment_link.readable_text
MacPaw's Moonlock Lab issued a report on Thursday about a new Mac malware threat that spreads through Google-sponsored ads. The malware poses as the Mac screen recording app Loom and several other apps.

Moonlock Lab believes that this malware campaign is run by a group dubbed Crazy Evil. When searching for Loom on Google, sponsored ads appear that look legitimate, even displaying the legitimate URL for the app at the top of the ad. But the actual URL for the app's link is a "near-perfect replica" and takes the user to a fraudulent site that has been constructed to fool the user. The fake site prominently displays a download button that saves a malicious file with stealer malware on the user's Mac.

While Loom appears to be the main app being used to fool users, Moonlock Lab has found that Crazy Evil is attempting to spread its malware through several other apps. Moonlock Lab provided a chart below that shows which apps have been targeted.

One of the main aspects of this malware attack is that when executed, the malware looks for Ledger Live, a crypto wallet. The malware replaces it with a clone that gives the attackers access to the user's cryptocurrency.

How to protect yourself from malware

The easiest way to avoid malware is to use only legitimately acquired apps from trusted sources, such as the App Store (which makes security checks of its software) or directly from the developer.

If you need to use search to find an app, always check the link before clicking on it. In Safari, you can turn on the Status Bar that appears at the bottom of every page, hover the cursor over a link, and then read the URL and check it before clicking on it. Google often adds its referral URL before every link in its search results, so you need to read the URL completely. You can also copy the URL and paste it into a text editor to check it before clicking on it.

Macworld has several guides to help, including a guide on whether or not you need antivirus software, a list of Mac viruses, malware, and trojans, and a comparison of Mac security software.

Apple has protections in place within macOS and the company releases security patches through OS updates, so it's important to install them when they are available. If Apple pulls back an update, the company will reissue it as soon as it is properly revised with corrections.

# data[].attributes.attachment_link.title
'Crazy Evil' Mac malware poses as Loom, other popular apps to steal Bitcoin

# data[].attributes.attachment_link.description
Malware spreads through Google-sponsored URLs.

# data[].attributes.body
'Crazy Evil' Mac malware poses as Loom, other popular apps to steal Bitcoin

# data[].attributes.attachment_link.title
How Infostealers Pillaged the World's Passwords - WIRED

# data[].attributes.attachment_link.description
Infostealer malware is swiping millions of passwords, cookies, and search histories. It's a gold mine for hackers-and a disaster for anyone who becomes a target.

# data[].attributes.body
Don't Provide Your Real Information to These 6 Kinds of Sites

# data[].attributes.attachment_link.title
Don't Provide Your Real Information to These 6 Kinds of Sites

# data[].attributes.attachment_link.description
You can protect your privacy and your inbox if you obscure your personal information on these websites.

# data[].attributes.body
How to tell if Apple emails are scams to try and get your data

# data[].attributes.attachment_link.readable_text
Keeping yourself safe online can be hard, with scams becoming more sophisticated over time. Here's how you should protect yourself, and your Apple account.

Cybercrime is a growing problem, with online denizens often at risk of account hacks, data breaches, and scams. With the continuing rise of data breaches, it's now becoming very easy for a scammer to get snippets of information that they can use against you.

The criminals are only going to escalate, so users need to learn how to protect themselves.

Even with the best password management apps and the highest levels of encryption available to consumers, the users themselves continue to be the biggest weak point. Criminals don't need to break an account's security, they only have to convince you to help them.

As a privacy and security-focused company, Apple has moved to release more resources to help users become safer online. These documents, in the support pages, outline many of the ways that users can do something to prevent bad things from happening to their accounts.

What follows is a summary of some of the more important things to keep in mind when dealing with potential scams online.

Social Engineering and Phishing

A high-class way of saying "Telling lies that seem truthful to get something valuable," social engineering refers to a very common attack vendor. One that relies on an attacker impersonating others, such as Apple support staff or those calls from "Microsoft Support" that frequently annoy people.

Often, the attacker pretends to be a legitimate representative of a company that you may have dealings with, such as Apple. They will then try to do various things to con you into offering up information that could be used to access your accounts, such as sign-in credentials or security codes.

In some cases, the hackers will use data scraped from major data breaches as a starting point. For example, in January, a Trello data breach exposed over 15 million accounts, including names, user names, and email addresses.

If someone calling you is able to tell you your own name, address, date of birth, or other credentials, victims may be convinced that the caller is legitimate. The caller then may willingly offer more information to the fraudster, since they have seemingly proved they are "legitimate."

Another type of attack is phishing, which is basically the same sort of thing, but performed over email or messaging services. Aside from supposed emails from Nigerian royalty, phishing attacks can look like vaguely legitimate emails from real companies.

These messages often insist that the user could benefit from something, that something has gone wrong, or be as trivial as a fake warning that someone has requested a password reset.

If you get a call or a message from a seemingly legitimate company and you're not sure if it's a scam to get your credentials, you should contact the company directly through official channels instead.

You don't have to go this far, though, as there are often clues in messages and emails that they are not legitimate.

How to identify fraudulent emails and messages

The email or phone number doesn't match the company it's supposedly coming from.

The email or phone number they contacted you is not the one you supplied the company in the first place.

Links in messages seem to have a URL that doesn't match up to an official company website.

Formatting or language issues that differ from normal emails from the company. Spelling mistakes are a big clue here.

The email requests personal information from you. Emails are sent as plaintext over the internet, so never send such credentials that way.

You didn't expect the contact in the first place, and that it contains an attachment. Often, the attachment contains malware, so leave it alone.

Apple accounts

While Apple does have a lot of protective measures on accounts, it cannot defend against every threat. That's especially true if Apple users are convinced to hand over their information.

This is what Apple says you should do to protect your Apple account and devices:

How to protect your Apple accounts from scammers

Do not share personal data or security information, such as passwords or temporary security codes. If someone directs you to a website to enter them, don't agree to do so.

Use features like two-factor authentication to secure accounts. Keep your security information up to date. Apple will never ask for this sort of information, even if it's for support purposes.

If requested, do not use Apple Gift Cards to make payments to other people. Gift cards are frequently used as a payment system for scams.

Take time to learn how to identify legitimate Apple emails relating to App Store or iTunes purchases.

Check out Apple's guides to keeping Apple devices and data secure

Download software only from sources that you trust completely.

Don't blindly click links in emails or open up sent attachments in unsolicited messages.

Avoid providing personal information if someone pretending to be Apple calls or messages you directly. Instead, contact Apple through official channels.

In the instance that you're getting contacted by someone who claims to be Apple but isn't, you can do a few things to help the company thwart their efforts.

For a start, Apple says users can forward suspicious emails to [email protected] .

If you receive spam through an iCloud.com, me.com, or mac.com inbox, mark them as Junk or move them to your iCloud Junk folder. This helps improve Apple's iCloud Mail filtering system.

If you receive spam through Messages, tap Report Junk under the message. It's also possible to block messages and calls from contacts.

Also, remember that Apple has a list of other resources to help keep your personal data and accounts safe.

# data[].attributes.attachment_link.title
How to tell if Apple emails are scams to try and get your data

# data[].attributes.attachment_link.description
Keeping yourself safe online can be hard, with scams becoming more sophisticated over time. Here's how you should protect yourself, and your Apple account.

# data[].attributes.body
Apple shares how to protect your Apple ID, avoid phishing, social engineering, and other scams

# data[].attributes.attachment_link.readable_text
Scams like phishing and social engineering are continuing to grow with some specifically targeting Apple users. With that in mind, Apple has shared a new support document with official tips on how to protect your Apple ID and other online accounts, how to spot and report scam emails, calls, and more.

We've seen a few different scams recently aimed at Apple users with a "smishing" iCloud link attack being the latest.

As it happens, Apple has shared a new support document on how to protect your account, avoid phishing, social engineering, scam calls, and more.

Along with being a valuable refresher for everyone, this is a great resource to share with less tech-savvy family and friends.

Apple's advice on how to protect your Apple ID and avoid scams

Protecting your Apple account

Here are Apple's 8 tips to make your Apple ID as secure as possible:

Never share personal data or security information like passwords or security codes, and never agree to enter them into a webpage that someone directs you to.

Protect your Apple ID. Use two-factor authentication, always keep your contact information secure and up to date, and never share your Apple ID password or verification codes with anyone. Apple never asks for this information to provide support.

Never use Apple Gift Cards to make payments to other people.

Learn how to identify legitimate Apple emails about your App Store or iTunes Store purchases. If you send or receive money with Apple Cash (U.S. only), treat it like any other private transaction.

Learn how to keep your Apple devices and data secure.

Download software only from sources you can trust.

Don't follow links or open or save attachments in suspicious or unsolicited messages.

Don't answer suspicious phone calls or messages claiming to be from Apple. Instead, contact Apple directly through our official support channels.

Apple also has a dedicated support document on getting help with security if you run into trouble with passwords/purchases, lost or stolen products, personal safety, and more.

How to handle suspicious emails, messages, and calls

If you receive a suspicious email that looks like it's supposed to be from Apple, please forward it to reportphishing@apple.com.

If you receive a suspicious FaceTime call (for example, from what looks like a bank or financial institution), email a screenshot of the call information to reportfacetimefraud@apple.com. To find the call information, open FaceTime and tap the More Info button "i" next to the suspicious call.

If you receive a suspicious link to a FaceTime call in Messages or Mail, email a screenshot of the link to reportfacetimefraud@apple.com. The screenshot should include the phone number or email address that sent the link.

To report a suspicious SMS text message that looks like it's supposed to be from Apple, take a screenshot of the message and email the screenshot to reportphishing@apple.com.

To report spam that you receive in your iCloud.com, me.com, or mac.com Inbox, mark the spam emails as Junk or move them to your iCloud Junk folder. When you mark an email as junk, you help improve iCloud Mail filtering and reduce future spam.

To report harassment, impersonation, or other types of abuse that you receive in your iCloud.com, me.com, or mac.com Inbox, send them to abuse@icloud.com.

To report spam or other suspicious messages that you receive through Messages, tap Report Junk under the message. You can also block unwanted messages and calls.

Report scam phone calls to the Federal Trade Commission (U.S. only) at reportfraud.ftc.gov or to your local law enforcement agency.

How to catch social engineering, phishing, and other scams

Social engineering attackers use impersonation and manipulation to first gain your confidence and trust. Then, they trick you into handing over sensitive data or providing them with access to your account information. They use a variety of tactics to impersonate a trusted company, entity, or someone that you know.

Watch for these signs to help identify if you're being targeted as part of a social engineering attack:

A scammer may call you from what appears to be a legitimate phone number for Apple or another trusted company. This is called "spoofing." If the call seems suspicious, consider hanging up and dialing the vetted number for the company yourself.

Scammers often mention personal information about you in an attempt to build trust and seem legitimate. They may refer to information that you consider private, such as your home address, place of employment, or even your Social Security number.

They will often convey a desire to help you resolve an immediate problem. For example, they may claim that someone broke into your iPhone or iCloud account, or made unauthorized charges using Apple Pay. The scammer will claim they want to help you stop the attacker or reverse the charges.

The scammer usually creates a strong sense of urgency to avoid giving you time to think and to dissuade you from contacting Apple yourself, directly. For example, the scammer may say that you're free to call Apple back, but the fraudulent activities will continue and you will be liable. This is false, and designed to prevent you from hanging up.

Eventually scammers will request your account information or security codes. Typically they will send you to a fake website that looks like a real Apple sign-in page and insist that you verify your identity. Apple will never ask you to log in to any website, or to tap Accept in the two-factor authentication dialog, or to provide your password, device passcode, or two-factor authentication code or to enter it into any website.

Sometimes, scammers will ask you to disable security features like two-factor authentication or Stolen Device Protection. They will claim that this is necessary to help stop an attack or to allow you to regain control of your account. However, they are trying to trick you into lowering your security so that they can carry out their own attack. Apple will never ask you to disable any security feature on your device or on your account.

How to catch scam texts and emails

Scammers try to copy email and text messages from legitimate companies to trick you into giving them your personal information and passwords. These signs can help you identify phishing emails:

The sender's email or phone doesn't match the name of the company that it claims to be from.

The email or phone they used to contact you is different from the one that you gave that company.

A link in a message looks right, but the URL doesn't match the company's website.

The message looks significantly different from other messages that you've received from the company.

The message requests personal information, like a credit card number or account password.

The message is unsolicited and contains an attachment.

Apple also warns about downloading software, highlighting that the safest way to install apps is through its official App Store or directly from a developer's website.

Apple ID password reset attack

One recent scam that Apple didn't cover in this support document is the Apple ID password reset attack that resurfaced this year.

We've got a full explainer on how to handle that:

Have you been seeing more scams this year? Share your experience in the comments!

FTC: We use income earning auto affiliate links. More.

Michael Potuck michaelpotuck

# data[].attributes.attachment_link.title
How to protect Apple ID and avoid scams - 9to5Mac

# data[].attributes.attachment_link.description
This guide covers Apple's official tips to protect your Apple ID account and avoid scams like phishing and social engineering.

# data[].attributes.attachment_link.readable_text
It is a long-standing misconception that Macs are impervious to malware. This has never been the case. And while Apple might secretly hope people continue the preconceived notion, Mac users continue to be caught off guard by cybercriminals whose attack methods are becoming increasingly sophisticated. Below, you'll find the most common macOS malware strains in 2024...

9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple.

It's increasingly clear that 2024 could prove to be an even more challenging year for Mac security. Looking back at 2023, at least 21 new Mac malware families were detected in the wild, a 50% increase year over year. Moreover, Patrick Wardle, founder of Objective-See, told Moonlock Labs that the number of new macOS malware specimens increased by about 100% in 2023 with no signs of a slowdown.

Phil Stokes, security researcher and blogger at leading cybersecurity firm Sentinal One, recently shared a ranking of the popularity of common macOS malware in 2024. From the chart below, ransomware, trojans, and backdoors continue to dominate.

What everyone needs on a Friday is...not a new malware discovery 🙉 😂 ...but this year's top 🔟 most prevalent #macOS #malware so far! 🙌
Based on submissions to VT, this is what I'm seeing from Jan - May 2024. pic.twitter.com/NpTqrXTIYE
- Phil Stokes ⫍🐠⫎ (@philofishal) May 10, 2024

Atomic Stealer (AMOS) is a widespread infostealer malware discovered in early 2023. Once installed, it quietly targets iCloud Keychain passwords, a user's system password, cookies, and credit card details from various browsers. It can also compromise crypto wallets, including Atomic, Binance, Exodus, Electrum, MetaMask, and more, as reported by my colleague Michael Potuck.

Phil Stokes's Twitter/X thread links to deeper dives into each of the top 10. I highly encourage you to check that out!

Rising Mac malware attacks, what gives?

It's no secret that malware specifically designed and made for Mac is growing exponentially, and Apple is aware of this. Last month, the company added 74 new Yara detection rules to macOS, the most I've ever seen. These help prevent malware from executing or spreading by checking for specific patterns that match known malware signatures or behaviors.

So, why is Mac becoming more targeted? Here's what I'm gathering.

Macs are rising in popularity, both for personal and business use. With this, they're losing their strength in low numbers and becoming a more attractive target for cybercriminals.

Moreover, the rise in malware-as-a-service (MaaS) is also a big contributor. For the first time in the history of the Internet, any Joe Shmoe can download and launch different types of attacks aimed at individuals and/or companies. MaaS platforms make it easier for attackers to target macOS users without needing programming knowledge. These attacks are also scary inexpensive to carry out.

Ways to protect yourself in 2024

1. Keep your device up-to-date: Whether it's an iPhone, Mac, or iPad, everyone should first keep macOS up-to-date with the latest security patch goodness. This will address known vulnerabilities that malware can exploit. Note: Apple will push new Yara rules automatically. More on that here.

2. Use antivirus software: This is important for scans and prevention. I recommend using Malwarebytes, which provides a free app for individuals that can detect and remove possible threats. Additionally, there's Intego and CleanMyMac X, which now includes a malware removal tool powered by its MoonLock service.

3. Exercise caution when clicking: Don't be stupid, stupid. Email continues to be the most popular vertical for malware. Minimal effort for criminals, maximum success. 9% of phishing attacks were successful in 2023, up 1% in 2022, according to Jamf. As you know, exercise caution when clicking any links and opening attachments.

4. Enable firewall: Enabling your Mac's firewall is the best way to prevent the acceptance of unauthorized applications and services. You should configure this accordingly.

5. Use strong (unique) passwords: Your name twice, followed by an exclamation, is not okay.

6. Enable disk encryption: On Mac, this is called FileVault and will encrypt all user data saved to disk on the fly. This will keep sensitive information safe in case your device is lost or stolen. According to Jamf's report, this was disabled on 36% of client devices.

7. Limit user privileges: It is important to restrict user privileges to prevent unauthorized installation of software and to limit the potential impact of malware infections. See how to limit privileges on Mac here.

More in this series
Follow Arin: Twitter/X, LinkedIn, Threads
Read more: Security Bite: Mac Malware wreaking the most havoc in 2024

FTC: We use income earning auto affiliate links. More.

# data[].attributes.attachment_link.title
Security Bite: Mac Malware wreaking the most havoc in 2024 - 9to5Mac

# data[].attributes.attachment_link.description
It is a long-standing misconception that Macs are impervious to malware. This has never been the case. And while Apple...

# data[].attributes.body
Security Bite: Mac Malware wreaking the most havoc in 2024

# data[].attributes.attachment_link.readable_text
Your iPhone is fairly secure by default, but Apple's Lockdown Mode takes it to Fort Knox levels of protection. If you're a high-value target for spyware, phishing attempts, and other sophisticated cyberattacks, it's an essential feature. But for almost everyone else, it's an extreme move. If you simply want to verify someone's identity when chatting, Contact Key Verification is a more practical option.

Contact Key Verification is an additional layer of security that can further protect your already end-to-end encrypted iMessage conversations. With it, you can verify iMessage contacts to ensure you're really chatting with them and not any imposters. This is done using public keys. You'll receive the contact's public key to verify them, and you'll send them yours so they can verify you. It's that simple.

Public keys are tied directly to each user's Apple ID and are only for use with the Contact Key Verification system. If you already have someone in your contacts with the correct email address or phone number, you'll be able to see their public key in the settings for your iMessage conversation. But you'll still have to verify them by comparing and matching the public verification code with the one shared by the contact.

When the system detects an anomaly, you'll receive an alert and a potential reason, such as the contact disabling Contact Key Verification, an unrecognized device appearing on the contact's account, a system outage, or a sophisticated attack against iMessage servers.

After receiving an alert, you can stop messaging the contact until you can reverify them. You can also just ignore it. But that's not a good idea if there are sensitive topics you'll be discussing in future chats with the contact.

Requirements

Before you begin, you should know the prerequisites for using Contact Key Verification. First, it's available on all of the following devices and software versions:

iOS 17.2 or later for iPhone

iPadOS 17.2 or later for iPad

watchOS 10.2 or later for Apple Watch

macOS 14.2 or later for Mac

visionOS 1.1 or later for Apple Vision Pro

Devices signed in to iMessage with your Apple ID must be running the software listed above. Contact Key Verification will let you know during setup if they aren't. You're also required to:

Be signed in to iCloud and iMessage with the same Apple ID.

Have iCloud Keychain turned on on all devices.

Use two-factor authentication for your Apple ID.

Have a passcode or password for all of your devices.

Once you've met these requirements, you can begin using Contact Key Verification. Note that the instructions below use iOS as an example, but the process is nearly identical to that of iPadOS. It's also very similar on macOS. However, while supported, you cannot yet set up or manage Contact Key Verification settings on watchOS or visionOS.

Enabling Contact Key Verification in Settings

Contact Key Verification is not on by default, so you'll have to flip the switch in the Settings app. So, navigate to Settings " Apple ID [your name] " Contact Key Verification. Then, simply toggle on the "Verification in iMessage" switch.

When you do this, a new dialog will appear describing how the Contact Verification Key system works in iMessage.

Contact key verification allows you to manually verify who you are messaging with by comparing contact verification codes in person or over the phone.

Conversations with people who have contact key verification turned on also receive automatic advanced protections to help prevent even very sophisticated attackers from impersonating anyone in a conversation.

If you change your mind, choose "Set Up Later" or "Cancel." Otherwise, tap "Continue." As long as all your iCloud-connected devices meet the Contact Key Verification requirements, you can start swapping keys with your contacts.

When some of your other devices connected to your Apple ID are running older software versions, it will let you know which devices they are so you can update them before returning to enable Contact Key Verification.

When enabled, Contact Key Verification will be on for all your iCloud-connected devices. However, only contacts in iMessage conversations with iCloud accounts can be verified; contacts in regular text conversations cannot.

Sharing Your Public Verification Code

If you want to appear verified for any of your contacts or even for anyone you message who is not in your contacts, you'll need to share your verification code. There are a few ways to get your assigned code.

Option 1: From the Settings App

The default method for getting the verification code is as follows:

1. Navigate to your Contact Key Verification menu in Settings.

2. Select "Show Public Verification Code."

3. Tap "Copy Verification Code."

4. Tap "OK" on the confirmation: "Your verification code was copied to the clipboard."

Now, you can paste the public verification code wherever people can find it, such as on social media, on a website, in an iMessage conversation, in an email, or through another means.

Option 2: From the Messages App

While getting your public verification code from the Settings app is the most straightforward method, you can also view and copy it from an iMessage conversation's settings in Messages.

Open a conversation with the contact in the Messages app, tap their profile photo at the top, and look for the Advanced Message Security section. Tap "Verify Contact," and the Verify Contact window will appear.

Next, select "use public verification codes," which opens a view with both your and your contact's public keys. Tap "Copy Verification Code," then "OK" on the "Your verification code was copied to the clipboard" confirmation.

Now, you can paste the public verification code wherever people can find it, such as on social media, on a website, in an iMessage conversation, in an email, or through another means.

Verifying a Contact with a Public Verification Code

There are three ways to verify a contact with a public verification code.

You can copy the contact's public verification code from wherever they shared it and add it to their contact card on your device.

You can verify someone in person, over a call, or in a chat by matching an eight-digit code on your device with the eight-digit code on the contact's device.

You can compare a contact's assigned public verification code with the public verification code they shared via social media, email, direct message, or even in person, over a call, or in a chat.

Method 1: Verify Using a Copied Public Verification Code

After copying the contact's public verification code, open their contact information in the Contacts app or via another app, such as Phone, Messages, or FaceTime. Then, hit "Edit" and find the "add verification code" field.

Next, tap the "add verification code" field. If it's your first time pasting something into the Contacts app from the app you pasted the code from, tap "Allow Paste" on the prompt. The code should automatically insert itself into the field. Tap "Done" to save the updated contact information.

Method 2: Verify by Matching an 8-Digit Numeric Code

If the contact you want to verify is physically near you, comparing the codes on your devices is the easiest way to verify them. You can also use this method over a phone or FaceTime call.

Open a conversation with the contact in the Messages app, tap their profile photo at the top, and look for the Advanced Message Security section. Tap "Verify Contact," and the Verify Contact window will appear.

If no eight-digit code appears in the window, instruct the contact to open a conversation with you in the Messages app, tap your profile photo at the top, and choose "Verify Contact" if you're not already verified in their system or "Show Verification Code" if you are.

When the eight-digit code appears, compare it with the one on the contact's end. If the eight numbers do not match, tap the "No Match" button. However, if they do, tap "Mark as Verified." Once verified, the person's contact card will open with the public verification code automatically pasted into the "verification code" field. Simply tap "Update" to save it and "Done" to exit the conversation settings.

Your contact can use the same process simultaneously to verify you on their end.

Once verified, a checkmark will appear next to the contact's name under their profile photo, and the verified phone number or email address in the Advanced Message Security section of the conversation settings will also have a checkmark as well as "Verified" written next to it.

Method 3: Verify by Matching a Public Verification Code

If the eight-digit code in Method 2 above isn't a good option for your situation, you can still verify the contact from Messages. As with Method 2 above, open a conversation with the contact in the Messages app, tap their profile photo at the top, and look for the Advanced Message Security section. Tap "Verify Contact," and the Verify Contact window will appear.

Next, select "use public verification codes," which opens a view with both your and your contact's assigned public keys. Compare the contact's code against the one you're referencing, then tap "Mark as Verified" if it matches.

Once verified, the person's contact card will open with the public verification code automatically pasted into the "verification code" field. Simply tap "Update" to save it and "Done" to exit the conversation settings.

Your contact can use the same process simultaneously to verify you on their end.

Once verified, a checkmark will appear next to the contact's name under their profile photo, and the verified phone number or email address in the Advanced Message Security section of the conversation settings will also have a checkmark as well as "Verified" written next to it.

Disabling Contact Key Verification

If you no longer want Contact Key Verification enabled on your iMessage account, you can easily disable it and discontinue using it. To do so, navigate to Settings " Apple ID [your name] " Contact Key Verification. Next, toggle off the "Verification in iMessage" switch. It will then warn you: "Existing conversations in Messages will show that you have turned off contact key verification." Tap "Turn Off" to disable it or "Keep Using" to cancel.

Getting Contact Key Verification Alerts

When someone you've verified turns Contact Key Verification off, you will get an alert in the iMessage conversation with them telling you so. Their name up top will have an exclamation sign next to it, and you'll see the same exclamation mark in the conversation at the point it was disabled. To clear the exclamation mark, tap "Options" under "[Name] turned off contact key verification," and then tap "Clear."

According to Apple, you'll also get alerts for:

An unrecognized new device was added to that person's Apple ID. This alert might mean that the person you are messaging has an issue with one of their devices, or that a sophisticated attacker might be attempting to eavesdrop on the conversation.

iMessage Contact Key Verification is unavailable. This alert might mean that there's a service outage or that iMessage Contact Key Verification is temporarily unavailable.

There's an issue with iMessage Contact Key Verification. This alert might mean that there's an issue with one of your devices or your account, or that a sophisticated attacker might be attempting to eavesdrop on the conversation.

Note that contacts who have verified you on their end will see the same warnings and options whenever you disable Contact Key Verification, there's a validation issue with one of your devices, or there's a system outage.

Don't Miss: If You Keep Valuable Information in Apple Notes, You Need to Read This

Just updated your iPhone? You'll find new features for Podcasts, News, Books, and TV, as well as important security improvements and fresh wallpapers. Find out what's new and changed on your iPhone with the iOS 17.5 update.

Cover photo and screenshots by Gadget Hacks

# data[].attributes.attachment_link.title
Set Up Contact Key Verification for the Highest Level of iMessage Security

# data[].attributes.attachment_link.description
Your iPhone is fairly secure by default, but Apple's Lockdown Mode takes it to Fort Knox levels of protection. If you're a high-value target for spyware, phishing attempts, and other sophisticated cyberattacks, it's an essential feature. But for almost everyone else, it's an extreme move.

# data[].attributes.body
Set Up Contact Key Verification for the Highest Level of iMessage Security

# data[].attributes.attachment_link.readable_text
One of Apple's upgrades for Safari - the Web Eraser content blocker - never became available to the public, even though it was complete and fully functional. Here's what happened along the way, what it looked like, and how it worked.

In April, AppleInsider revealed exclusive information about new features within the Safari 18 web browser, which was still in development at the time. In our initial report, we discussed two major features Apple created for the latest iteration of Safari - Intelligent Search and Web Eraser.

Intelligent Search is a feature that provides users with key information about the page currently on-screen, along with an AI-generated summary of its contents. While this enhancement made it into the final release under the name Highlights, it appears as though Web Eraser has been removed in its entirety.

Web Eraser was Apple's built-in content-blocker, found in pre-release development builds of Safari 18. In speaking with people familiar with the matter, we learned that Web Eraser allowed users to select any page element on-screen, and "erase" it.

The erasure was persistent, meaning that internal versions of Safari remembered the changes made to a webpage, and reminded users of them whenever the page was visited. We were told that Web Eraser enabled the removal of virtually anything on-screen, from distracting banner ads to articles or even entire page sections.

So, why did Apple remove a Safari feature that was fully functional?

The answer to that question is likely two-fold - to avoid controversy and to make leaked information appear inaccurate or incorrect.

After AppleInsider's original article on the subject was published, it caught the attention of major industry associations in the publishing and advertising sector. Following our reveal of the feature, mainstream media websites The Financial Times and Business Insider reported that the UK's News Media Association and a group of French publishers had both sent complaints to Apple about Web Eraser in May.

The controversy caused by Web Eraser's reveal

The News Media Association's letter stated that Web Eraser was akin to an ad blocker, which they considered to be "a blunt instrument which frustrates the ability of content creators to sustainably fund their work." The letter also added that Web Eraser "could lead to consumers missing important information which would otherwise have been very useful to them."

In an interview with Press Gazette, News Media Association chief Owen Meredith said that they were "not aware of any publisher who's had any conversations with Apple or any engagement between Apple and publishers on this."

Meredith went on to criticize Apple for developing "a tool that has potentially significant consequences on how publishers' content is used or displayed on Apple devices" all without any involvement from publishers. The NMA chief described it as an "extremely concerning way for a tech giant to go about doing business."

For reference, the UK's News Media Association represents over 900 different national, regional, and local titles, including The Times, The Daily Mail, The Guardian, and The Daily Telegraph. Safari accounts for around a third of the internet browser market in the United Kingdom.

Business Insider later reported on May 29 that a group of French publishing associations also voiced their concerns by sending a signed letter to Tim Cook. The group included the online publishing association Geste, press trade group APIG, advertising agency association SRI, digital marketing body Alliance Digitale, media-agency trade body UDECAM, as well as the advertiser association Union des Marques.

The group, which collectively represents around 800 advertisers, ad-tech companies, agencies, and publishers in France, said in the letter that Web Eraser could threaten 100,000 jobs in France that depend on online ads.

Their letter also said that Web Eraser "raises numerous questions, particularly concerning legal and editorial responsibilities that Apple still has not responded to, " and that the feature would jeopardize ad sales "in an already troubled period."

"[It would] restrict citizens' access to free, diverse and quality information," the letter goes on to say, adding that Web Eraser could have "significant consequences to pluralism, content accessibility, and democratic vitality."

According to the group's estimates, Safari accounts for a quarter of all web traffic in France, while the number goes up to 90% for mobile devices.

The French publishers' concerns were so serious that they simultaneously sent out copies of their letter to government officials. This included the French minister of culture, the head of the French Competition Authority, and Thierry Breton, the European Commissioner for internal markets.

All of this happened despite the fact that Web Eraser was never officially announced, nor was it ever acknowledged by Apple in any shape or form.

The feature had somehow managed to generate a massive amount of controversy, solely from our report. Even though it was nowhere to be seen.

While Apple likely sought to avoid controversy and complaints from publishing associations, the company also likely had another reason for abandoning its Web Eraser feature.

Other possible reasons for Web Eraser's removal

Apple has been known to rename in-development features and devices ahead of release, seemingly for no reason other than to paint leaked reports as wrong or inaccurate in some way.

A notable example of this occurred in 2023, when Apple released the first developer betas of its new operating system for the Apple Vision Pro headset. Widely expected to make its debut under the name xrOS, the company instead announced " visionOS."

Even then, there were indications of a rushed rebrand. Apple's instructional videos and code from the operating systems contained clear mentions of the name xrOS.

Apple renamed several operating system features ahead of launch. To be more specific, the company renamed its Adaptive Voice Shortcuts accessibility feature to Vocal Shortcuts.

As mentioned earlier, Intelligent Search received the name Highlights, while Generative Playground was changed to " Image Playground." The name "Generative Playground" still appears as the application title in the recently released developer betas of Apple's operating systems.

AppleInsider has independently verified the name changes of the software features described above. We have done so through people familiar with Apple's pre-release operating systems.

By removing Web Eraser in its entirety and leaving no trace of it, Apple could have easily killed two birds with one stone. Publishers and advertisers would be content with the feature's absence, and information on the ad-blocker would be regarded as incorrect.

Another possibility is that Web Eraser was an internal-only tool meant exclusively for use by Apple's software engineers. This theory does not necessarily explain the relatively polished UI the feature had though, as there would be no reason to put effort into the design of an internal application.

What did Web Eraser look like and how did it work?

Speaking to people familiar with the matter, AppleInsider has received detailed information about the overall design and function of Web Eraser in pre-release versions of Safari 18.

In particular, we were told that Web Eraser was accessible from the same UI element that currently displays "Highlights" in the publicly available betas of Apple's operating systems. The new UI element had a more consistent look across iPadOS and macOS, as the company initially sought to provide a unified experience on both devices.

On the Mac, the new UI element originally featured rounded buttons, with the same layout currently found on iPadOS 18. The option to toggle Web Eraser was located above the page summary or "Highlights" in current developer betas.

AppleInsider was told that activating Web Eraser would make the URL bar in Safari turn gray and that users would then be able to select specific page elements they'd like to erase.

The UI reportedly resembled the third-party application 1Blocker, which has a similar visual editor feature that can hide elements of a webpage. It's possible that Apple wanted to introduce a privacy-focused content blocker that would rival third-party products such as 1Blocker.

Upon deleting their desired page elements and sections, such as banner ads, users could continue browsing as they would normally. As mentioned earlier, the erasure was persistent.

Practically, this means that Safari would automatically hide unwanted elements every time the user visited a specific webpage.

The browser would still remind users of hidden elements, however, giving users the option to undo changes made by accident. The amount of information we were able to obtain overwhelmingly indicates that Web Eraser was a functional OS feature, despite never being released.

While Web Eraser apparently didn't make the cut, Apple introduced a whole host of other system features. At the company's annual WWDC on Monday, the company previewed a new AI-powered image generation tool called Image Playground, as well as new features for Notes, and improvements to the Mail app.

# data[].attributes.attachment_link.title
What happened to Web Eraser - Apple's content-blocker for Safari 18

# data[].attributes.attachment_link.description
One of Apple's upgrades for Safari - the Web Eraser content blocker - never became available to the public, even though it was complete and fully functional. Here's what happened along the way, what it looked like, and how it worked.

# data[].attributes.body
What happened to Web Eraser - Apple's content-blocker for Safari 18

# data[].attributes.attachment_link.readable_text
A lot of people are wondering if we'll ever see a jailbreak for iOS & iPadOS 18, and while we don't have a crystal ball clear enough to give you a definitive answer, we will say that there's at least a chance the iPad (7 th generation) gets a jailbreak thanks to being susceptible to the checkm8 hardware-based bootrom exploit and being compatible with iPadOS 18 - the last checkm8-vulnerable iPhone or iPad meeting both of those criteria.

The reason this still works on the iPad (7 th generation) is because the checkm8 hardware-based bootrom exploit can't be patched by software updates, so all Apple can do is implement more security roadblocks that simply make jailbreaking susceptible devices harder to do, but persistent hackers will make their way through eventually.

Speaking of which, talented hacker and palera1n team member @dora2ios just this week teased a video on X (formerly Twitter) of what appears to be this exact device being jailbroken on iPadOS 18. The video didn't come without caveats, however, as @dora2ios said many things in this demo video are "broken" and that the jailbreak remains "incomplete."

It's likely that will change in the future as the palera1n team gets its hands dirty with iPadOS 18 in the future, but it's also worth noting that the iPad (7 th generation) isn't the only checkm8-susceptible device getting updates later this year - so too are certain Apple TVs, including the Apple TV HD and Apple TV 4K (1 st generation).

A few months back, we shared how the palera1n jailbreak would be coming to tvOS so that checkm8-vulnerable Apple TV users could enjoy the use of hacks on their Apple-branded entertainment boxes. Interestingly enough, a recent teaser shared by hacker Nick Chan (@riscv64) in a post shared on X (formerly Twitter) shows off a screenshot of the palera1n jailbreak on an Apple TV running tvOS 18:

Chan was sure to dispel any doubt by saying that it was achieved with "a pile of hacks" and that there are still "a lot of issues right now," so it doesn't seem like a release will happen anytime in the near future. But since the tvOS 18 software update is still in beta, it's not like anyone is particularly rushing for this release just yet anyway.

As for newer devices that aren't susceptible to the checkm8 exploit, which primarily covers anything with an A12 or newer chip, the unfortunate news is that there isn't even a jailbreak for you yet on iOS & iPadOS 17, so we would expect that an iOS & iPadOS 18 jailbreak would take even longer, should one come at all.

Starting with iOS & iPadOS 17, Apple beefed up system security with something called Secure Page Table Monitor, which requires an SPTM bypass for a jailbreak to be made. Unfortunately, no one has come forward with one yet. So we will have to wait and see...

Are you excited about the palera1n-based teasers in the meantime? Let us know in the comments section down below.

# data[].attributes.attachment_link.title
Hackers show off jailbroken checkm8-vulnerable iPad and Apple TV running iPadOS 18 & tvOS 18 respectively

# data[].attributes.attachment_link.description
Hackers have demonstrated at least partially working jailbreaks on iPadOS 18 and tvOS 18 on checkm8-vulnerable devices.

# data[].attributes.body
Hackers show off jailbroken checkm8-vulnerable iPad and Apple TV running iPadOS 18 & tvOS 18 respectively

# data[].attributes.body
iOS 18 Will Let You Lock Apps Behind Face ID, Sources Say

# data[].attributes.attachment_link.title
iOS 18 Will Let You Lock Apps Behind Face ID, Sources Say

# data[].attributes.attachment_link.description
iOS 18 will offer a new security feature that allows users to lock individual apps, according to multiple sources familiar with the matter. This…

# data[].attributes.attachment_link.readable_text
Over the last few years, Apple has built a reputation for being strong on user privacy. Its marketing likes to emphasize this point often as a way of distinguishing the company from its competitors.

Interestingly though, a new discovery reveals that the just-released M4 iPad Pro includes a new security feature that Apple hasn't told anyone about.

Your microphone and camera indicators are more secure

As discovered by Guilherme Rambo, Apple's M4 iPad Pro comes with a security enhancement that relates to the microphone and camera light indicators.

Rambo writes on Mastodon:

Fun fact about the M4 iPad Pro: it's the first device to support and use Apple's new Secure Indicator Light (SIL) mechanism. When using the microphone or camera, the corresponding indicator dot is effectively rendered in hardware, making it a lot less likely that any malware or user space app would be able to access those sensors without the user's knowledge.

Apple first introduced the microphone and camera light indicators-the little orange and green dots that appear when those sensors are in use- back in fall 2020 with iOS 14.

These indicators were intended to increase user awareness of when an app might be listening in or taking video, all in an effort to dissuade bad actors from leveraging an iPhone's hardware without user consent.

While those indicators historically have been tied to software triggers, the new Secure Indicator Light of the M4 iPad Pro appears to make the system even more secure by tying its control to hardware components.

New feature made possible by Secure Exclave

Rambo first uncovered the existence of a new 'Secure Exclave' as part of the M4 chip a couple weeks ago, but until today it was unclear what all this security component made possible. Now, it seems, one function at least is to prevent any tampering from happening with the microphone and camera indicator lights. Thus ensuring they work as intended and no malicious apps can circumvent them.

Currently the new iPad Pro is the only device to contain this new security protocol, but it will almost certainly make its way to the iPhone 16 Pro's A18 chip and to M4 Mac models later this year.

In the meantime, perhaps Apple isn't mentioning the feature publicly because it would indicate, inadvertently, that the existing microphone and camera indicators in all other hardware aren't as secure as they could be.

FTC: We use income earning auto affiliate links. More.

Ryan Christoffel iryantldr

# data[].attributes.attachment_link.title
M4 iPad Pro has a new security feature Apple hasn't told us about - 9to5Mac

# data[].attributes.attachment_link.description
Apple has introduced a new security feature with the M4 chip on the newest iPad Pro, taking an existing system and making it more secure.

# data[].attributes.body
The M4 iPad Pro has a new privacy feature Apple hasn’t told anyone about

# data[].attributes.attachment_link.readable_text
Making picks for this guide to the best VPN for iPhone involved hands-on testing, which I'll describe in more detail shortly, but it also hinged heavily on guidance from cybersecurity experts. When it comes to the types of things consumers should look for in VPN services, they told me in separate interviews, much of what separates the good from the bad can be gleaned before anything is installed. These experts include:

What the experts said

When you surf the internet freely without a VPN, you're being tracked online constantly by multiple third parties, including your Internet Service Provider (ISP), search engines like Google, and possibly even your employer or school. Connecting to a VPN means taking your traffic away from them and putting it in the hands of one lone entity instead, conceding exclusive, unfettered access to all of your browsing data. It's a privilege that needs to be earned, and the true caliber of a VPN ultimately comes down to whether you can wholly believe it's keeping you safe.

Unfortunately, the VPN industry is notorious for hyperbolic marketing, especially when it comes to privacy practices. This can "give VPN users a false sense of security if they don't realize that the protections offered are not comprehensive," according to a Consumer Reports investigation into 16 providers. (Many popular VPNs shout about offering "military-grade" encryption, for example, which isn't a thing.) It's unwise to take a provider's "trust me bro!" claims at face value.

So how do you know for sure if a VPN is trustworthy? A single Google search can be enlightening: A good provider won't have a long rap sheet for mishandling users' personal data or succumbing to server breaches, and bad headlines should raise a red flag - including those about a VPN's ownership or parent company. A swift, effective response to crises and a healthy dose of corporate accountability can offset these concerns in some cases, but I also place a high value on a pristine reputation.

The best VPN services should also be willing to open themselves up to scrutiny. Bragging about a strong "no logs" privacy policy that specifies how users' personal information gets protected is one thing, but subjecting that policy to independent audits - and making the results public - provides a much higher level of assurance.

The most trustworthy VPNs will also issue regular transparency reports disclosing any requests for data they've received from government or law enforcement agencies. (These requests won't yield anything if a provider's privacy policy holds up.) Some go the extra mile by offering in-house bug bounty programs to researchers who comb their software and servers for vulnerabilities.

Tests we run on VPNs

I've previously written longer, more in-depth reviews of NordVPN, ExpressVPN, and TunnelBear's MacOS apps, which included assessments of their company policies, histories, and overall reliability. With that knowledge in my back pocket, I conducted additional hands-on testing of their iOS apps for this guide.

Using my personal iPhone 11 with iOS 16.6.1, I had each VPN connected for approximately eight hours at a time to get a general sense of the user experience as part of a casual, everyday workflow. This involved a handful of performance benchmarks:

DNS leak tests

Often described as "the internet's phone book," the DNS (Domain Name System) is basically a back-end directory that translates website domain names into computer-speak, aka internet protocol (IP) addresses. An IP address is a unique number that's assigned to a device when it's connected to the internet; it identifies the device's general location and the name of the ISP.

Without making things overly complicated (bear with me): When you search for a website, your browser sends a query to one of your ISP's DNS servers to track down its matching IP address(es) so it can send you to that page. Without the DNS, you'd have to type out a long string of numbers every time you wanted to visit a website. Instead of " Mashable.com," for example, you'd enter "104.18.33.218" or "172.64.154.38" into your search bar.

A VPN is supposed to reroute your DNS queries to its own DNS servers while you're connected to it - that way, your ISP (and possibly other snoops) can't see where you are or what sites you're looking up. If the VPN is faulty, it may continue to send DNS queries to the ISP's DNS servers, putting your security at risk. That's the gist of a DNS leak.

Some VPN apps have built-in DNS leak tests that tell you if your connection is secure and whether your real IP address is being hidden. Otherwise, you can perform them via DNSleaktest.com. When I try a VPN, I run its standard test twice: once with the VPN off, and once with it connected.

Trying different use cases

The No. 1 purpose of VPNs is to make it difficult for anyone other than the provider to identify and track your online activity, so every VPN I recommend must do that well - no exceptions. However, VPNs are also widely used to spoof user locations and skirt geo-restrictions on content, especially overseas streaming libraries. (Services like Netflix limit their libraries abroad because of region-specific distribution rights.)

While a VPN will never be disqualified simply because it can't get users access to geo-blocked content, it's a plus if it succeeds, so I still test for it. I do so by connecting to one of the VPN's UK servers from my home in Chicago and running a DNS leak test to see if my IP address changes accordingly, then attempting to watch Love Island UK on the UK streaming service ITVX.

Speed tests

The connection speed of a VPN depends on a lot of different variables, but it will almost always be slower than your regular internet connection, so it's not a huge factor in my final recs. That said, I try to get an idea of how well a VPN performs by using it for a lengthy period of time and running it through some quick Ookla Speedtests. (I do three of them: one with the VPN off, one with the VPN connected to a local server, and one with the VPN connected to a French server.) If a VPN is noticeably sluggish to the point where it affects usability, I'll call it out.

A general rule of thumb for any VPN is that your connection speeds will be fastest when you're connected to a server that's geographically close to your actual location.

Other important details

I also took the following factors into account as I used each VPN on iOS and decided whether to recommend it, listed in no particular order:

Included features

Most premium VPNs come with similar privacy tools, so I don't encounter major provider-to-provider discrepancies in this regard. Still, it's worth noting some of the important ones I look out for:

A kill switch will immediately disconnect your device from the internet if your VPN drops. (This one's non-negotiable.)

Support for multi-hop connections that route your traffic through two or more of the VPN's servers. This adds an extra layer of protection.

Split tunneling, a tool that sends some of your traffic through the VPN and some outside it to conserve bandwidth, can be useful for streaming and gaming.

Oftentimes, providers will also bundle their VPN with additional security features like malware/adware blockers, data breach detectors, and cloud storage. These won't make the VPN itself any better, but they're good to have alongside your go-to antivirus software and password manager. (If you have to choose between a reputable VPN or one that comes with a bunch of add-ons, always go with the former.)

Protocol type

A VPN's is the set of instructions that determine how data gets communicated between its servers and your devices. Many VPN providers have developed proprietary protocols within the past few years, but OpenVPN remains the most popular and widely respected option: It's stable, secure, and open-source, meaning anyone can inspect its code for vulnerabilities. WireGuard is another good pick that's newer than OpenVPN and supposedly faster.

Encryption type

A VPN protects your data by encrypting it, or scrambling it up into unreadable "ciphertext" that can only be decoded with a secret key or password. Virtually all premium VPNs use Advanced Encryption Standard (AES) 256-bit encryption, which is pretty much uncrackable to third parties.

Server network size and distribution

Picking a VPN with a large server network means there's a lower likelihood of you sharing one with a bunch of other users, which is especially valuable for streaming (since there's more bandwidth to go around).

Relatedly, a VPN with a geographically diverse network of servers in many different parts of the world will make it easier for you to spoof specific locations and find one close to you to optimize connection speeds. Most premium VPNs maintain servers throughout the Americas, Europe, Asia, and Australia; few have a big presence in Africa.

Number of simultaneous connections

Most VPNs can be used on five to 10 devices per account (depending on the provider), which should be plenty for individual users. A handful of them support unlimited simultaneous connections to better serve bigger households.

Customer support options

Users should have access to some kind of help around the clock in case an issue arises with their VPN connection or account, whether it's by phone, email, or live chat. (Online help forums and tutorials are nice, but not enough on their own.) I also give preference to VPNs that offer some kind of money-back guarantee; in most cases, it's 30 days long.

Overall value

Premium VPN providers typically charge anywhere from $2 to $12 per month for access to their clients, depending on the subscription length. It's easier to justify the higher end of that spectrum if it gets you a reliable and responsible VPN with some useful security features.

Ease of use

Some VPNs are more intuitive and beginner-friendly than others.

It's important to note that many popular VPN providers posit their jurisdiction, or the location of their headquarters, as something that can have serious privacy implications based on local surveillance laws (such as the , Nine, and 14 Eyes alliances). Without getting too in the weeds, the experts I spoke to said the average consumer shouldn't put a big stake in these claims, and that authorities will get access to user data one way or another if the need is great enough. What's more concerning, they added - to bring things full circle - is whether any data is being retained by a VPN provider in the first place.

If anything, users might be better off choosing a VPN headquartered in a country with strong consumer protections against deceptive marketing (like the U.S. and many countries in the European Union). These could come in handy if a provider's privacy policy was ever questioned.
Note: Ookla is owned by Mashable's publisher, Ziff Davis.

# data[].attributes.attachment_link.title
The best VPN for iPhone: Which iOS VPN should you pick?

# data[].attributes.attachment_link.description
Here's a guide to the best VPN for iPhone based on our research and hands-on testing.