Researchers found a sophisticated macOS malware campaign distributing Poseidon Stealer via a counterfeit DeepSeek AI website. This malware employs social engineering and anti-analysis techniques to steal sensitive data. Once downloaded, it bypasses macOS protections and exfiltrates credentials, cryptocurrency wallet data, and more. Effective mitigation strategies include restricting script execution, enhancing detection solutions, and user education.
IXON VPN Vulnerabilities Let Attackers Gain Access to Windows & Linux Systems
A security assessment by Shelltrail revealed three critical vulnerabilities in the IXON VPN client, allowing privilege escalation on Windows and Linux. Identified as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02,
%20CISO%E2%80%99s%20Core%20Focus.webp?w=0&resize=0,0&ssl=1 "Identity and Access Management (IAM)")