com.apple

• North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack

  North Korea-Nexus Threat Actor Compromises Widely Used Axios NPM Package in Supply Chain Attack Written by: Austin Larsen, Dima Lenz, Adrian Hernandez, Tyler McLellan, Christopher Gardner, Ashley Zaya, Michael Rudden, Mon Liclican, Muhammad Umair Introduction Google Threat Intel

• The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors

  The Proliferation of DarkSword: iOS Exploit Chain Adopted by Multiple Threat Actors Introduction Google Threat Intelligence Group (GTIG) has identified a new iOS full-chain exploit that leveraged multiple zero-day vulnerabilities to fully compromise devices. Based on toolmarks i

• Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit

  Coruna: The Mysterious Journey of a Powerful iOS Exploit Kit Introduction Google Threat Intelligence Group (GTIG) has identified a new and powerful exploit kit targeting Apple iPhone models running iOS version 13.0 (released in September 2019) up to version 17.2.1 (released in D

• UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering

  UNC1069 Targets Cryptocurrency Sector with New Tooling and AI-Enabled Social Engineering Written by: Ross Inman, Adrian Hernandez Introduction North Korean threat actors continue to evolve their tradecraft to target the cryptocurrency and decentralized finance (DeFi) verticals.

• Bad Apples: Weaponizing native macOS primitives for movement and execution

  Bad Apples: Weaponizing native macOS primitives for movement and execution Cisco Talos documents several macOS living-off-the-land (LOTL) techniques, demonstrating that native pathways for movement and execution remain accessible to those who understand the underlying architectu

• Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529

  Breaking the Sound Barrier, Part II: Exploiting CVE-2024-54529 In the first part of this series, I detailed my journey into macOS security research, which led to the discovery of a type confusion vulnerability (CVE-2024-54529) and a double-free vulnerability (CVE-2025-31235) in

All reports →

• Connector · intel_report_ingest3