A recently patched vulnerability in Apple's Passwords app exposed users to phishing attacks for nearly three months after its launch with iOS 18. The flaw allowed bad actors to potentially access sensitive information on privileged networks. The issue has been addressed in the iOS 18.2 update. In addition to this vulnerability, a new phishing campaign has emerged, targeting Mac users after previous attacks shifted focus from Windows users due to enhanced security measures in the Microsoft Edge browser. The ongoing phishing threats highlight the evolving tactics of cybercriminals as they adapt to improved defenses in popular software.
First-ever iPhone trojan steals facial recognition data to access bank accounts - should you worry about it? https://t.co/eL1azKzI2L
We’ve seen oauth phishing before with sensitive scopes like mail read/write. Now, we’re seeing oauth attacks simply used as a redirect so that the only URL in the message or pre-authentication is one with a legit microsoft domain. Makes it harder to detect. https://t.co/ryGVAcYcVi
Phishing campaign changes target from Windows to Mac users https://t.co/RpYDCyCnhP #Apple