Intego Mac Podcast

Apple's Worldwide Developer Conferences launches on Monday, and we discuss what to expect. We also talk about RomCom malware, PyPI 2FA, Hot Pixels (which may not be so hot) and other malware and vulnerabilities. Show Notes : Apple WWDC macOS Names that Apple has Registered but Not Used Yet US govt banned NSO’s Pegasus, but said to buy rival spyware Paragon Graphite RomCom malware spread via Google...

A new hacking tool, BrutePrint, can unlock lots of smartphones, including some iPhones with Touch ID. Router infections can be hard to remove, and we discuss why Apple might have gotten out of the Wi-Fi business. And we take a close look at whether it's safe to use an iPhone, if it can no longer run the latest version of iOS. Show Notes : Typing “rash” in Safari may cause a crash Urgent Patches: m...

New top-level domains use common file extensions, and this could lead to confusion, and dangerous downloads. Apple announces a new personal voice modeling feature. And Google warns dormant users: log in, or get shut out. Show Notes : New ZIP [and MOV] domains spark debate among cybersecurity experts CVE-2023-26818 - Bypass TCC with Telegram in macOS Apple introduces new features for cognitive acce...

The FBI has shut down servers for Snake malware, which we wrote about back in 2017. Apple's lockdown mode has been found to prevent some serious malware attacks. And Apple is testing the water with app subscriptions for two of its pro apps on the iPad. Show Notes : Snake Malware Ported from Windows to Mac (Intego 2017 article) U.S. and Allies Identify and Expose Russian Intelligence-Gathering “Sna...

Apple has issued the first of a new type of updates to its operating systems: Rapid Security Response. We discuss several new types of Mac malware, and we look at how Google's cloud sync for its Authenticator app is insecure. Show Notes : RSA Conference Apple issues first Rapid Security Response for macOS, iOS, iPadOS Google adds account sync for Authenticator, without E2EE What are Passkeys, and...

AI is coming to an app near you. We discuss how these features will affect work, and the potential security implications of AI tools snarfing up files in businesses. We also discuss how to set up an old - or new - Mac as a home server. It's a useful tool if you have multiple Macs. Show Notes : The Three Laws of Robotics ChatGPT banned in Italy over privacy concerns Malicious Keylogger Malware “Bla...

Lockbit ransomware is starting to target Macs, two zero-day Chrome vulnerabilities require urgent updates, and sideloading - installing apps not from Apple's App Store - is coming to iOS soon; at least in the EU. Show Notes : Urgent Update: Chrome, Edge, Brave, Vivaldi browsers patch zero-day vulnerability Urgent: 2nd Chrome zero-day vulnerability patched in 5 days The LockBit ransomware (kinda) c...

The FBI warns people not to use public charging stations; we warned about this five years ago. An interesting phishing attack leverages QuickBooks accounting software to send fake invoices to people. And what does a company do if its smart garage doors are hacked? Disable them. Show Notes : Urgent Patches: macOS Ventura 13.3.1, iOS 16.4.1 fix 2 actively exploited vulns (UPDATED) Smart Garage Compa...

We look at new malware that uses a supply chain attack; we explain what this is, and why it is not uncommon. We discuss how hackers can open a certain company's garage doors from anywhere, and how a journalist got injured by a malicious USB drive that exploded. Show Notes : Apple’s Worldwide Developers Conference returns June 5, 2023 Gordon E. Moore, Intel co-founder (and of “Moore’s Law” fame) di...

New Mac malware can exfiltrate various types of data from your Mac, and a Chrome extension can steal Facebook session cookies. We discuss how stolen session cookies can give attackers easy access to your accounts, and potential ways to thwart this. Show Notes : Apple releases macOS Ventura 13.3, iOS 16.4, and more, with security updates Apple Reveals How Many iPhones and iPads Are Running iOS 16 a...

Can malware use AI to modify itself after it's been installed on a computer? Can AI help you in daily productivity tasks? And will passkeys replace passwords? Show Notes : Microsoft Copilot: A whole new way to work The Age of AI has begun GPT-4 People are Paying $17 for Hundreds of AI-Generated Headshots What Are Passkeys and How Do They Work? Intego Mac Premium Bundle X9 is the ultimate protectio...

Apple has finally stopped selling the Apple Watch Series 3, which can no longer get security updates. The FBI shuts down 11-year old malware. And a $300 hacking tool enables phishers to defeat two-factor authentication using automated man-in-the-middle attacks. Show Notes : Apple stops selling Watch Series 3 — eight months after its last security update GarageBand Security Update Details Finally R...

ChatGPT is helping scammers create phishing emails that don't sound phony, and Amazon sells plenty of items that are scams. Scammers are using AI-generated voices to scam elderly people, and the EU wants messaging apps - including Apple's iMessage - to be interoperable. Show Notes : Apple adds banana-yellow color to iPhone 14 and iPhone 14 Plus lineup The Complete Guide to Apple Watch Bands Garage...

Mac malware is again found in pirated applications, LastPass was hacked via an employee's home computer running Plex, and hackers may be able to get into a bank account with an AI-generated voice. Microsoft makes a step toward supporting iMessage on Windows, and we look at a new Nokia phone that is easily repairable. Show Notes : Evasive cryptojacking malware targeting macOS found lurking in pirat...

With SMS-based two-factor authentication no longer free on Twitter, we discuss the more secure and free way of protecting your account using an authenticator app. We also look at new details about Apple's latest security updates, Windows on M-series Macs, and a WhatsApp warning about reused phone numbers. Show Notes : Update Now: Urgent fix for macOS Ventura 13.2.1, iOS 16.3.1 resolves major vulne...

Apple has issued an update for a zero-day, in the wild, WebKit vulnerability. The Kia Challenge has shown that you can start some cars with a USB cable. And sometimes you need to factory reset Apple devices; we explain how. Show Notes : Apple issues macOS Ventura 13.2.1, iOS 16.3.1 to fix zero-day vulnerability Microsoft will forcibly remove Internet Explorer from most Windows 10 PCs today Hyundai...

AI has reached an inflection point; we discuss ChatGPT and other AI tools and their potential security and privacy risks. We also have an ears-on report about the new HomePod; it sounds better than expected. Show Notes : The New HomePod Brings a New Sound and More Home Smarts The Next Track Until further notice, think twice before using Google to download software Fake App Store pages are the new...

This week's threats involve credential stuffing and pig butchering, and we examine whether you should use security keys to protect your Apple ID account, and why the new Mac mini is a maxi computer. Show Notes : Apple Maps privacy bug may have allowed apps to collect location data without permission PayPal Data Breach in December Affected 35,000 Customers Norton’s LifeLock Password Manager Faces B...

Apple has updated all its operating systems again, and even issued a security update for iOS 12. We discuss new features in the HomePod software, and we look back at the notable Mac malware of 2022. Show Notes : Apple releases Ventura 13.2, iOS 16.3, surprise iOS 12.5.7; neglects still-sold Apple Watch Series 3 How to protect your Apple ID account with Security Keys on iPhone, iPad, or Mac HomePod...

Apple has introduced the latest versions of its M2 chips, and updated three Mac models. They also surprised everyone with a new, full-sized HomePod. We also look at brand-based phishing, Google's AirTag clones, and a trifecta of stories about instant messaging apps. Show Notes : FBI: Cyber Criminals Impersonating Brands Using Search Engine Ad Services to Defraud Users Google plans AirTag clone, wi...

We discuss the 20th anniversary of Apple's Safari web browser, look at more false positives on roller coasters and ski slopes with Apple's crash detection, then finish looking at our Apple security and privacy roundup for 2022. Show Notes : Apple’s Safari browser is 20 years old Camino Canceled: Mac Browser Calls It Quits Dridex banking malware modified to spread using macOS ChatGPT is enabling sc...

Password manager LastPass had a data breach, and users' vaults are at risk; TikTok spied on US journalists; and two new phishing attempts showing how complex techniques are used to try to fool people. And we begin our look at the year in Apple security and privacy. Show Notes : LastPass password manager suffers massive data breach TikTok Spied On Forbes Journalists TikTok is now banned on mobile d...

There are some basic tips that can help you enhance the security and privacy of your Apple devices. We go over a list of ten top tips that you might want to look into as a New Year's resolution. Show Notes : 10 Things You Can Do to Improve Your Security and Privacy on Your Mac, iPhone, or iPad Intego Mac Premium Bundle X9 is the ultimate protection and utility suite for your Mac. Download a free t...

Commercial stalkerware can record everything on a victim's iPhone; yet another Gatekeeper bypass shows that even Lockdown Mode isn't impermeable; and Apple hasn't transitioned all its Macs to its own processors: the Mac Pro still hasn't made the change. Show Notes : Microsoft discovers new Gatekeeper bypass; Apple updates past security advisories Apple also patched a zero-day vulnerability last we...

Apple has released a slew of updates and new features for most of its operating systems. We'll take a look at some of the highlights including Apple's Advanced Data Protection. Show Notes : Apple releases macOS Ventura 13.1, iOS 16.2, and more; fixes zero-day vuln Apple to Allow Outside App Stores in Overhaul Spurred by EU Laws Apple Freeform Lets You Brainstorm and Collaborate on Mac, iPad, and i...