NAS device vendors are dealing with several severe vulnerabilities in Netatalk, the open-source implemenation of AFP.
Apple has patched two zero-day vulnerabilities that were being used in the wild. Users are advised to update as soon as they can.
A researcher discovered a way to gain control of both webcams and any open session in Safari. How did they do it?
Patch now, if you haven’t already, before voyeurs take advantage of Powerdir, a new bypass that removes your privacy.
On Lock and Code this week, we talk to a Mac security expert about why Macs are clearly the best… or are they?
It’s rare for Apple to walk back changes, but in October its new line of MacBook Pros did just that.
Shrootless is a vulnerability found in macOS that can bypass the System Integrity Protection by abusing inherited permissions.
Beware Mac malware passing itself off as the popular power-user tool iTerm2, as well as Microsoft Remote Desktop, SecureCRT, and Navicat Premium.
Apple has called time on dodgy Symantec certificates, causing software like Citrix’s ReceiverHelper to be identified as malware.