Osascript is a tool tracked across 8 threat clusters and 15 intelligence report mentions on ThreatCluster. First observed December 15, 2025; most recent activity June 1, 2026.
A North Korean cybercrime group known as Sapphire Sleet has launched a social engineering campaign targeting macOS users, as reported by Microsoft's Threat Intelligence unit. The campaign involves tricking users into…
The ADEX security team has published a case study on an active XCSSET malware infection affecting an iOS app development studio. XCSSET, a modular macOS malware identified in 2020, embeds itself in Xcode project files…
The InstallFix campaign targets users by creating fake installation pages for Anthropic's Claude AI, tricking them into executing malware. This sophisticated social engineering tactic exploits the growing reliance on AI…
Bybit's Security Operations Center (SOC) reported a sophisticated malware campaign targeting macOS users searching for 'Claude Code,' an AI development tool from Anthropic. The campaign, first identified in March 2026,…
MioLab, a sophisticated MacOS infostealer, has emerged as a significant threat in the cybercrime landscape, particularly targeting both consumer and enterprise users of Apple's macOS. Marketed on Russian-language forums…
Recent research by Cisco Talos reveals that attackers are increasingly leveraging native macOS features to execute code and move laterally within enterprise environments. With over 45% of organizations now using macOS,…
A sophisticated malware campaign has compromised the Open VSX extension marketplace, affecting over 5,000 developer workstations. The malicious package masqueraded as a legitimate Angular Language Service extension,…
Researchers from Darktrace identified a new malware sample named React2Shell, created using AI and large language models (LLMs). This malware exploits a known vulnerability, allowing less skilled hackers to generate…