QuimaRAT is a newly discovered Java-based remote access trojan (RAT) sold as a malware-as-a-service (MaaS) subscription on the dark web. The cross-platform malware targets Windows, macOS, and Linux systems by embedding Java Native Access (JNA) libraries for multiple architectures within a Java SE 8 archive. Subscription prices range from $150 per month to $1,200 for lifetime access, making it broadly accessible to threat actors.

Source

A new macOS infostealer named PamStealer is targeting users by masquerading as the legitimate open-source clipboard manager Maccy. The infection begins when a victim downloads a malicious disk image from a fraudulent website designed to mimic the official project page. This initial stage utilizes a clever AppleScript wrapper that executes hidden JavaScript for Automation to retrieve the final payload.

Source

Apple is reportedly negotiating with Chinese semiconductor manufacturers ChangXin Memory Technologies and Yangtze Memory Technologies to secure a stable supply of memory chips. This move aims to counter a worsening global supply crunch driven by the rapid growth of artificial intelligence technologies. While these Chinese firms are currently on a Pentagon blacklist, Apple is seeking to navigate political hurdles to integrate their components into its hardware ecosystem.

Source

A critical vulnerability in Apple’s Hide My Email service reportedly allows attackers to uncover the real email addresses associated with generated aliases. Discovered by security researcher Tyler Murphy, the flaw was responsibly reported to Apple over a year ago but remains unpatched despite multiple follow-ups. Independent testing by 404 Media successfully verified the exploit, confirming that a hidden iCloud address could be linked to a user's primary identity in minutes.

Source

Apple has shifted its security strategy by releasing an unexpected out-of-band update to address over 30 vulnerabilities across its ecosystem. This move targets flaws in iOS, iPadOS, macOS, and Safari, including a high-severity use-after-free bug in the WebKit engine. The company indicated that this accelerated release schedule is a direct response to the decreasing time between vulnerability discovery and active exploitation.

Source

Oracle has announced plans to stop maintaining the macOS/x64 port of the Java Development Kit beginning with JDK 27, scheduled for release in September. While the deprecation is currently in a draft state, a pull request has already been submitted to implement the change within the Java Virtual Machine. Future builds for Intel-based Macs will require a specific flag, but Oracle will no longer guarantee that the software will build or function correctly.

Source

Security researchers have identified a technique that allows attackers to disable enterprise protection tools on macOS without requiring administrative credentials or kernel exploits. The method targets Apple’s Inter-Process Communication framework, known as XPC, which manages communication between applications and privileged background services. By exploiting how macOS caches trust fingerprints for signed applications, an attacker can inject malicious payloads into a legitimate app bundle while maintaining its trusted status.

Source