Microsoft Threat Intelligence researchers have discovered an updated version of XCSSET malware that targets Apple macOS users’ crypto wallets. Initially detected in 2020, the malware allows hackers to take screenshots, record user activity, steal data from the Telegram app and target data in Apple’s Notes app. The malware can be distributed via infected Xcode projects used to create Apple apps. Microsoft advises users to inspect and verify Xcode projects and download apps only from trusted sources.

IXON VPN Vulnerabilities Let Attackers Gain Access to Windows & Linux Systems
A security assessment by Shelltrail revealed three critical vulnerabilities in the IXON VPN client, allowing privilege escalation on Windows and Linux. Identified as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02,