Screen-reading malware that exploits accessibility features for users with disabilities and steals personal data has been discovered. Responding swiftly, Apple removed affected apps from its App Store and likely banned the malicious developers. Moving forward, Apple plans to enhance its app review process, continuously evolve its security measures, and educate developers on security best practices to protect user data. Users are also encouraged to regularly review app permissions and keep their devices updated.

Botnet campaign hits unpatched TP-Link Archer AX-21 routers
The “Ballista” botnet campaign is exploiting a high-level security flaw to infect unpatched TP-Link routers. Detected by Cato CTRL researchers in January 2025, it has