Microsoft has warned of a new version of the macOS malware XCSSET, which is now targeting users via infected Xcode projects. The updated malware includes enhanced obfuscation tactics, persistence mechanisms, and infection strategies. Reportedly seen in “limited attacks”, the malware is capable of stealing digital wallet data and exfiltrating system information. Microsoft suggests users should remain vigilant and only install apps from trusted sources.
IXON VPN Vulnerabilities Let Attackers Gain Access to Windows & Linux Systems
A security assessment by Shelltrail revealed three critical vulnerabilities in the IXON VPN client, allowing privilege escalation on Windows and Linux. Identified as CVE-2025-ZZZ-01, CVE-2025-ZZZ-02,
%20CISO%E2%80%99s%20Core%20Focus.webp?w=0&resize=0,0&ssl=1 "Identity and Access Management (IAM)")