🚀 Medial Secures Investment on Shark Tank India - Fueling the Future of Professional Social Networking. 🔥

Startup Showcase

Premium Content

Try our Valuation Calculator →

News on Medial

3 million iOS and macOS apps were exposed to potent supply-chain attacks

Arstechnica

Arstechnica · 1y ago

3 million iOS and macOS apps were exposed to potent supply-chain attacks

Vulnerabilities in the CocoaPods repository for macOS and iOS apps have left millions of users at risk of supply-chain attacks. The vulnerabilities, which were fixed last October, allowed hackers to add malicious code to apps and gain access to sensitive information such as credit card details and medical records. The vulnerabilities were related to an insecure verification email mechanism and an active programming interface for abandoned pods. These vulnerabilities underscore the need for robust security measures in app development and the importance of regularly updating software.

Related News

Phishing attacks on Apple Mac OS and iOS up by 9% in 2019: Kaspersky Report

Livemint

Livemint · 10m ago

Phishing attacks on Apple Mac OS and iOS up by 9% in 2019: Kaspersky Report

Reports indicate a rise in phishing attacks targeting Apple devices, with 1.6 million attacks recorded in the first half of 2019. While Apple's MacOS and iOS platforms have historically experienced fewer malicious attacks compared to Windows and Android, cybercriminals are increasingly turning to phishing as it is platform agnostic and more effective. One popular phishing scheme mimics the iCloud interface, tricking users into revealing their Apple ID credentials. Users are urged to be cautious of suspicious emails and refrain from clicking on unverified links.

Supply-chain attack on WordPress plugins affects as many as 36,000 sites

Arstechnica

Arstechnica · 1y ago

Supply-chain attack on WordPress plugins affects as many as 36,000 sites

A supply-chain attack targeted WordPress plugins running on 36,000 websites. Five plugins were affected, allowing for the creation of attacker-controlled administrative accounts and manipulation of search results. The malware injected into the updates is not sophisticated and dates back to June 2024. Users are advised to uninstall the affected plugins and check for unauthorized content or admin accounts. The origins and distribution method of the malware are still being investigated. This attack highlights the vulnerability of supply chain attacks and the importance of regularly updating and securing software.

Naukri bug exposed recruiter email IDs via mobile apps: Report

Economic Times

Economic Times · 3m ago

Naukri bug exposed recruiter email IDs via mobile apps: Report

A bug in Naukri.com's mobile apps exposed recruiters' email addresses, potentially risking phishing attacks and spam, according to TechCrunch. Security researcher Lohith Gowda discovered the vulnerability caused by a flaw in the API used by Naukri’s apps. The web version was unaffected. The issue has been fixed, and Naukri reported no unusual activity affecting user data integrity. Gowda warned the data could be misused in public breach databases or by scammers.

WWDC 2025: Everything that Apple 'Sherlocked' this time | TechCrunch

TechCrunch · 2m ago

WWDC 2025: Everything that Apple 'Sherlocked' this time | TechCrunch

At WWDC 2025, Apple unveiled several updates across its operating systems, "Sherlocking" functionalities of existing third-party apps. Key features include a revamped Spotlight for macOS reminiscent of Raycast and Launchbar, flight tracking through Live Activities similar to Flighty, AI integration in XCode comparable to Alex for Xcode, podcast recording on iPad akin to Riverside, and call screening with iOS 26 likening Robokiller and Truecaller. Apple's approach often makes users aware of such capabilities, benefiting customized third-party apps.

Proton releases a new app for two-factor authentication | TechCrunch

TechCrunch · 28d ago

Proton releases a new app for two-factor authentication | TechCrunch

Proton has launched a new authenticator app for two-factor authentication, offering users a secure and convenient way to protect their accounts. Available on iOS, Android, Windows, macOS, and Linux, the app uses end-to-end encryption and is open source. It allows syncing codes across devices, automatic code backup, and works offline. Emphasizing user control over data and accessibility, the app aims to provide an extra security layer against attacks, enhancing user privacy and security.

Apple will reportedly open up its local AI models to third-party apps

The Verge

The Verge · 3m ago

Apple will reportedly open up its local AI models to third-party apps

Apple plans to open its local AI models to third-party developers, enhancing app integration through a forthcoming software development kit (SDK). This move resembles Google’s AI API offerings and allows developers to incorporate AI features like writing tools into their apps, albeit only accessing smaller, on-device models initially. Apple is expected to announce this initiative at the Worldwide Developers Conference (WWDC), alongside significant updates for iOS, macOS, and iPadOS.

Apple gets into AI: all the news on iOS 18, macOS Sequoia, and more

The Verge

The Verge · 6m ago

Apple gets into AI: all the news on iOS 18, macOS Sequoia, and more

Apple has launched iOS 18, iPadOS 18, and macOS Sequoia, introducing AI-enhanced features and operating updates. The new Apple Intelligence suite includes image generation, custom emojis, and ChatGPT integration. The updates enable users to alter text styles, change default apps, and assess hearing through AirPods. iPadOS adds a calculator, while watchOS monitors for sleep apnea. Additionally, iPhones now support RCS messaging with Android, enhancing cross-platform communication.

Microsoft releases a new Windows app called Windows App for running Windows apps

Arstechnica

Arstechnica · 11m ago

Microsoft releases a new Windows app called Windows App for running Windows apps

Microsoft has unveiled a new app called Windows App that allows users to run Windows and Windows apps on various platforms, including Windows, macOS, iOS, web browsers, and Android. The app is a replacement for the Microsoft Remote Desktop app and offers a unified way to access Windows PCs, cloud-hosted Windows 365, and remotely hosted apps provisioned by work or school. Windows App provides improvements such as easier account switching, enhanced device management for IT administrators, support for frontline workers, and the "Relayed RDP Shortpath" feature for enabling Remote Desktop on restricted networks.

Apple updates all its operating systems, brings Apple Intelligence to Vision Pro

Arstechnica

Arstechnica · 4m ago

Apple updates all its operating systems, brings Apple Intelligence to Vision Pro

Apple released updates for iOS, iPadOS, macOS, tvOS, and visionOS, featuring Apple Intelligence enhancements. iOS 18.4 introduces Priority Notifications and new emojis, while macOS 15.4 offers Mail organization and Quick Start setup. VisionOS 2.4 adds Apple Intelligence to Vision Pro, enabling features like Genmoji and Image Playgrounds. The updates aim to enhance user experience across all Apple devices, though Intel Macs miss some features. Detailed release notes focus on security patches.

Insurance giant Fidelity hit by data breach — thousands of customers may have had data stolen

Techradar

Techradar · 1y ago

Insurance giant Fidelity hit by data breach — thousands of customers may have had data stolen

Tens of thousands of Fidelity Investments Life Insurance customers had their private data stolen in a supply chain attack that occurred in November 2023. The breach, which targeted a US subsidiary of Infosys, resulted in the theft of individuals' names, Social Security numbers, bank account details, and more. LockBit, a major ransomware operation, claimed responsibility for the breach. This incident highlights the risks posed by supply chain attacks and the potential for cybercriminals to exploit stolen data for various scams. In a separate incident, Fidelity National Financial also suffered a data breach in January 2024, compromising data on over a million customers.

Trackers

Active Indian VC’s

OG Capital Email

With a hands-on approach, OG Capital aims to invest in over 20 promising...

Accel Partners Email

Early and growth-stage investments in disruptive technology companies with...

Early-stage venture capital firm investing in technology startups in India. Focus on...

Access All Trackers

Startup Showcase Winners

June 2025

Helping your parents when you are miles away

The Pit Stop Your Cravings Deserve

The next generation E-commerce platform

Enter Ongoing Startup Showcase

Top Users

Trending News on Medial

Just Months After Promotion, Open ...

Microsoft locks down a building a ...

Gaming Ban Stumps Cricket: Virat ...

Download the medial app to read full posts, comements and news.