Breaking News – Cyber Threats (last 6h)
Generated: 2025-12-24 12:00 PST
- New MacSync macOS Stealer Uses Signed App to Bypass Apple Gatekeeper
The Hacker News • 2025-12-24 08:23 • thehackernews.com
Cybersecurity researchers have discovered a new variant of a macOS information stealer called MacSync that’s delivered by means of a digitally signed, notarized Swift application masquerading as a messaging app installer to bypass Apple’s Gatekeeper checks.
“Unlike earlier MacSync Stealer variants that primarily rely on drag-to-terminal or ClickFix-style techniques, this sample adopts a more
https://thehackernews.com/2025/12/new-macsync-macos-stealer-uses-signed.html - MongoDB warns admins to patch severe RCE flaw immediately
BleepingComputer • 2025-12-24 06:18 • www.bleepingcomputer.com
MongoDB has warned IT admins to immediately patch a high-severity vulnerability that can be exploited in remote code execution (RCE) attacks targeting vulnerable servers. […]
https://www.bleepingcomputer.com/news/security/mongodb-warns-admins-to-patch-severe-rce-flaw-immediately/
Sources: BleepingComputer, The Hacker News, KrebsOnSecurity, SANS ISC, CISA.
