Security firm Check Point Research has unveiled details about Banshee Stealer, a Mac malware updated with encryption from Apple’s XProtect that can sneak past macOS defences, primarily harming Chromium-based browsers. Mainly delivered via GitHub repositories hosting cracked software, it steals login data through deceptive browser extensions and pop-up dialogues. However, some experts warn that the threat has been exaggerated and that it can largely be countered through Apple’s Gatekeeper precautions and proactive personal cyber hygiene practices.
CISA Adds Apache, Microsoft Bugs to Know Exploited Vulnerabilities Database
The U.S. CISA updated its Known Exploited Vulnerabilities (KEV) Catalog, highlighting several critical vulnerabilities including Apache OFBiz (CVE-2024-45195), Microsoft .NET Framework (CVE-2024-29059), and Paessler PRTG