Intego is the leader in Mac security, protecting Apple users from the dangers of the Internet since 1997. Follow for The Mac Security Blog and Podcast updates.

Joined March 2011
This is an old post, but it highlights a technique used in recent phishing campaigns: a deceptive hyphen (-) character in domain names. login-x․com is NOT x․com x․com-log․in is NOT x․com This technique is often used in scam texts and iMessages, too. Please spread the word!
PSA: Phishing scams are getting more and more elaborate these days. Please use caution before clicking anything and if it's not from x.com/ or twitter dot com then it's NOT us. i.e. don't fall for fakedepartment-x.com. Other Helpful Links: • Hacked Accounts: help.x.com/en/forms/account-… • 2FA Issues: help.x.com/en/forms/account-… • Harassment: help.x.com/en/forms/safety-a… • Doxxing: help.x.com/en/forms/safety-a… • Impersonation: help.x.com/en/forms/authenti…
3
4
27
2,585
Why should you stay on the very latest Apple OS? Why not wait to upgrade? Here’s why. 👇 Patches can be reverse engineered. (Bad guys do this, too.) Right now, everyone who’s still on iOS/iPadOS 18.4, macOS Sequoia 15.4, or *any* older version is endangering their security.
Technical analysis of CVE-2025-31201: reverse engineering the diff between iOS 18.4 and 18.4.1 to study the changes made to RPAC.: blog.epsilon-sec.com/cve-202… #iOS #apple #cybersecurity #reversing #pac #security #cve #vulnerability
2
7
1
34
4,003
Arc finally released a macOS update on Thursday, which includes Chromium 135.0.7049.42, the latest stable version. Arc also released an iOS app update on Tuesday this week; version 1.43.0 includes “fixes for four iOS security issues.” 👀
1
1
4
607
One week after Google patched a zero-day vulnerability in Chrome, one popular browser, Arc, still isn’t patched. This vulnerability has reportedly been used to spread malware in the wild. 👀 Hey, @arcinternet… how long are you going to leave your users defenseless?
4
2
1
20
2,086
Someone just tried to phish Vercel’s CEO to hijack his 𝕏 account. 👀 Pay close attention to From addresses and link URLs.
New targeted 𝕏 hijacking campaign just dropped. This one is more sophisticated than previous attempts 🧵
1
2
1
19
2,782
Termius for iOS/iPadOS/visionOS just got a security update to fix a 16-month-old vulnerability, CVE-2023-48795. The macOS version got the same patch 3 weeks ago, on March 6.
1
4
7
1,031
If you’ve downloaded either of these games, scan your computer for malware infections. 👾
🚨 Valve’s Steam game platform was exploited to push malware—twice in 2 months. Valve has removed “Sniper: Phantom’s Resolution” from Steam. Last month it banned “PirateFi”—both reportedly contained infostealer malware. Read @theJoshMeister’s report: 🔗 intego.com/mac-security-blog…
1
9
57
3,205
Kirk and I chat about the latest Apple and cybersecurity news every week. Do you follow the podcast? It’s free!
🎙️ Intego Mac Podcast # 388 “RCS, FBI, and Alexa” is LIVE! This episode, Kirk @McElhearn & @theJoshMeister discuss: 💬 Apple support for encrypted RCS messages ⚖️ FBI says don’t use online file converters 👂 Amazon to collect your Alexa conversations 🔗 podcast.intego.com/388
1
2
10
1,406
These 3 apps in the App Store got security updates today: Session, Zoom, & Brave, for iPhone, iPad, & Apple Vision Pro. 👀 How often do you manually check if your apps are updated? 🤔 I suggest checking daily. Press & hold on the App Store app, tap Updates, swipe ⬇️ to refresh.
1
2
2
15
1,160
Want more security discussion? Listen to the weekly Intego Mac Podcast: xitter.cf/integosecurity/status/…
🎙️ Intego Mac Podcast # 387 “Defense in Depth” is LIVE! This week, Kirk @McElhearn & @theJoshMeister discuss: 🛠️ Apple’s latest updates patch a serious vulnerability. 🔐 Is the tide turning in how governments view backdoor access to encrypted data? 🔗 podcast.intego.com/387
1
11
1,029
Check to make sure your Apple operating systems and third-party browsers are updated!
Apple released updates for iOS, iPadOS, macOS, & visionOS on Tuesday addressing CVE-2025-24201, a security bug used to hack iPhones in 2023. Google Chrome, Brave, & Vivaldi have rolled out patches so far, too. Intego’s @theJoshMeister has the details: 🔗 intego.com/mac-security-blog…
1
3
19
1,615
Finally—more than 3 weeks after posting an incomplete report on 𝕏 about this on February 17—Microsoft has published a blog post with full indicators of compromise (IOCs), including hashes of malware samples.
2
5
28
2,304
There are immediately obvious ethical issues with this alternative iOS app store. The very first app they feature is a blatantly unauthorized Pokémon TCG Pocket clone. I strongly advise against downloading Aptoide on your iPhone.
Aptoide Alternative App Store Launches in the EU With Access to Older Versions of Games macrumors.com/2025/02/18/app…
3
6
3
25
5,000
Intego Mac Security retweeted
Apple Is Listening! Do you want more privacy? Turn off Analytics on all your Apple devices now and take control of your data! @theJoshMeister can help you get started: 🔗intego.com/mac-security-blog…
3
1
6
833