Curated security research, vulnerabilities, advisories and tools for practitioners.

#macos

Security coverage tagged macos.

1.

[CVE-2026-90894] ParaShells: Parallels Desktop Turns Appliance Install Into a Root Shell

vulnerability | 2026-09-15 13:16 | CVE-2026-90894 | jfrog.com | original ↗ | #privilege-escalation | #lpe | #macos

2.

Compromised Flutter package on pub.dev contains XCSSET malware

blog | 2026-09-08 00:00 | aikido.dev | original ↗ | #supply-chain | #malware | #macos

3.

Intego X9: Never trust my updates

research | 2026-03-19 23:00 | blog.quarkslab.com | original ↗ | #vulnerability-research | #privilege-escalation | #macos

4.

Intego X9: Why your macOS antivirus should not trust PIDs

research | 2026-02-25 23:00 | blog.quarkslab.com | original ↗ | #vulnerability-research | #privilege-escalation | #ghidra

5.

Fake Homebrew Pages Deliver Cuckoo Stealer via ClickFix | macOS Threat Hunting Analysis

research | 2026-02-17 00:00 | hunt.io | original ↗ | #supply-chain | #malware | #threat-hunting

6.

Intego X9: When your macOS antivirus becomes your enemy

research | 2026-02-09 23:00 | blog.quarkslab.com | original ↗ | #vulnerability-research | #privilege-escalation | #macos

7.

Deep Analysis of the Malicious AppleScript Payload (MacSync Stealer)

blog | 2026-01-08 09:10 | labs.cognisys.group | original ↗ | #threat-intelligence | #macos | #malware-analysis

8.

Odyssey Stealer & AMOS Hit macOS Developers with Fake Homebrew Sites

blog | 2025-10-16 00:00 | hunt.io | original ↗ | #phishing | #macos | #homebrew

9.

Kali Linux & Containerization (Apple's Container)

blog | 2025-07-29 00:00 | kali.org | original ↗ | #virtualization | #macos | #kali-linux

10.

Clickfix on macOS: AppleScript Stealer, Terminal Phishing, and C2 Infrastructure

blog | 2025-07-22 00:00 | hunt.io | original ↗ | #phishing | #macos | #c2

11.

Daemon Ex Plist: LPE via MacOS Daemons

research | 2025-07-17 15:11 | swarm.ptsecurity.com | original ↗ | #macos | #local-privilege-escalation | #launchd

12.

ControlPlane Local Privilege Escalation Vulnerability on macOS

vulnerability | 2025-07-14 22:00 | blog.quarkslab.com | original ↗ | #privilege-escalation | #macos | #vulnerability

13.

Mitigating ELUSIVE COMET Zoom remote control attacks

blog | 2025-04-17 04:00 | blog.trailofbits.com | original ↗ | #macos | #social-engineering | #trail-of-bits

14.

CCleaner Local Privilege Escalation Vulnerability on macOS

vulnerability | 2025-03-24 23:00 | blog.quarkslab.com | original ↗ | #privilege-escalation | #macos | #vulnerability

15.

Unmasking SparkRAT: Detection & macOS Campaign Insights

blog | 2025-01-28 00:00 | hunt.io | original ↗ | #threat-hunting | #macos | #dprk

16.

Exploiting Microsoft Teams on macOS during a Purple Team engagement

research | 2024-10-07 22:00 | blog.quarkslab.com | original ↗ | #macos | #vulnerability | #pentest

17.

Our audit of Homebrew

blog | 2024-07-30 13:00 | blog.trailofbits.com | original ↗ | #security-audit | #ci-cd | #macos

18.

macOS Malware Impersonates The Unarchiver App to Steal User Data

blog | 2024-07-30 00:00 | hunt.io | original ↗ | #malware | #phishing | #macos

19.

SEO Poisoning Campaigns Target Browser Installers and Crypto Sites, Spreading Poseidon, GhostRAT & More

blog | 2024-07-16 00:00 | hunt.io | original ↗ | #macos | #malvertising | #signal

20.

Wiz extends vulnerability scanning support to MacOS instances

blog | 2024-02-29 15:12 | wiz.io | original ↗ | #cloud | #cloud-security | #aws

21.

Adding build provenance to Homebrew

blog | 2023-11-06 13:00 | blog.trailofbits.com | original ↗ | #ci-cd | #macos | #supply-chain-security

22.

The issue with ATS in Apple’s macOS and iOS

vulnerability | 2023-10-30 12:00 | CVE-2023-38596 | blog.trailofbits.com | original ↗ | #macos | #ios | #apple

23.

Binary-searching into CVMServer

vulnerability | 2022-06-16 15:00 | theori.io | original ↗ | #macos | #exploit | #cve-2022-26721

24.

Announcing osquery 5: Now with EndpointSecurity on macOS

blog | 2021-11-10 06:05 | blog.trailofbits.com | original ↗ | #open-source | #endpoint-security | #macos

25.

DEF CON 29 Recap: 9 Talks You May Have Missed

blog | 2021-08-19 00:00 | CVE-2021-30657 | bishopfox.com | original ↗ | #malware | #conference | #def-con

26.

Sinter: New user-mode security enforcement for macOS

blog | 2020-08-12 05:41 | blog.trailofbits.com | original ↗ | #open-source | #endpoint-security | #macos

27.

LLDBagility: practical macOS kernel debugging

research | 2019-06-17 22:00 | blog.quarkslab.com | original ↗ | #macos | #virtualbox | #kernel

28.

An overview of macOS kernel debugging

research | 2019-05-06 22:00 | blog.quarkslab.com | original ↗ | #reverse-engineering | #macos | #kernel

29.

Manage Santa within osquery

blog | 2018-05-29 11:50 | blog.trailofbits.com | original ↗ | #endpoint-security | #macos | #osquery

30.

Announcing the Trail of Bits osquery extension repository

blog | 2017-12-14 13:51 | blog.trailofbits.com | original ↗ | #firmware-security | #firmware | #macos