Microsoft Threat Intelligence warns of a new, harder-to-detect variant of the modular macOS malware XCSSET. The malware infects Xcode projects and can target user’s digital wallets and system information/files. Microsoft advises users to check project downloads, source apps from trusted sites, and explore system-based defence services. Microsoft Defender for Endpoint on Mac can detect this variant.

Salt Typhoon used custom malware JumbledPath to spy on U.S. telecom providers
China-linked APT group Salt Typhoon has been using a custom malware named JumbledPath to spy on US telecom providers. Insikt Group highlighted that several US