macOS

Apple has transitioned to a more frequent security patching cadence to mitigate the risks posed by AI-driven cyberattacks. While this reduces the window for exploitation, experts warn that user behavior and the lack of advanced endpoint security frameworks on mobile remain significant vulnerabilities.

WasmForge is a novel loader designed to wrap offensive security tools in WebAssembly to evade EDR detection. It achieves this by providing a custom runtime environment that bridges WASM modules to native host APIs without requiring changes to the original tool's source code.

A new side-channel attack named FROST allows websites to bypass browser sandboxing by analyzing SSD latency. By using deep learning to process I/O traces, attackers can fingerprint the applications and websites running on a user's device.