A critical remote code execution vulnerability in Apple’s macOS, tracked as CVE-2024-44236, allows attackers to execute arbitrary code via specially crafted ICC profile files. Discovered by Hossein Lotfi, it was patched in macOS updates on October 28, 2024. Users should update their systems promptly to mitigate risks, although no exploits have been detected so far.

Marks & Spencer Hackers Tricked IT Workers Into Resetting Passwords
Recent reports indicate that cyberattacks on Marks & Spencer (M&S) and Co-op involved hackers tricking IT employees into resetting passwords, allowing unauthorized access to their