cybersecurity

Privacy, Full Disk Access and AI Agents

, , ,

Apple is intensifying its review and enforcement of Full Disk Access (FDA) permissions in macOS to enhance user privacy, especially with the advent of AI agents like Meta’s Muse that require broad access to user data to operate autonomously. These AI agents demand sweeping FDA rights to interact with sensitive data such as Messages and Mail, raising concerns about potential inaccuracies, unexpected actions, and vulnerabilities like prompt injection, with users ultimately held responsible for agent behavior. Apple aims to refine FDA controls carefully to better protect privacy without adding complexity, though it remains uncertain whether this will effectively mitigate risks posed by autonomous AI on Macs.

https://eclecticlight.co/2026/10/06/privacy-full-disk-access-and-ai-agents/

Secretive Helps You Keep Your SSH Keys Secret, Keep Them Safe

, ,

Secretive is an open-source macOS tool that stores SSH keys securely within the Mac’s Secure Enclave, preventing export and enhancing protection by leveraging the system’s most sensitive security features. While it requires manual setup and doesn’t allow backup or transfer of keys between devices, it supports modern cryptographic algorithms and integrates with developer tools like GitHub and file transfer apps, offering a robust security option until Apple possibly integrates similar functionality into its Passwords app.

https://sixcolors.com/post/2026/10/secretive-helps-you-keep-your-ssh-keys-secret-keep-them-safe/

Objective-See: Tools

, , ,

Objective-See offers a suite of free, open-source security tools designed specifically to protect Macs from malware, unauthorized access, and network threats. These tools include LuLu, a firewall for monitoring network connections; OverSight, which alerts users to microphone and webcam use; and RansomWhere?, which detects suspicious file encryption to prevent ransomware. All tools are available on GitHub, enabling users to inspect, download, and utilize them to enhance their macOS security.

https://objective-see.org/tools.html

New macOS ClickFix Attack Silently Mounts DMGs to Push Infostealer

, , ,

A new macOS ClickFix attack uses deceptive Terminal commands to silently download, mount, and launch malicious DMG files containing the Atomic macOS Stealer (AMOS) infostealer malware. This malware targets numerous browsers, cryptocurrency wallets, messaging apps, and system keychains to steal sensitive information and uploads the data to attacker-controlled servers. The campaign begins with fake CAPTCHA pages tricking users into running commands that automate the infection process without manual DMG execution.

https://www.bleepingcomputer.com/news/security/new-macos-clickfix-attack-silently-mounts-dmgs-to-push-infostealer/

Expanding Private Cloud Compute

Apple is expanding its Private Cloud Compute (PCC) technology beyond its own data centers by collaborating with Google and NVIDIA to run Apple Intelligence workloads on Google Cloud Platform. This move extends Apple’s strong privacy and security commitments for AI inference from Apple devices to third-party cloud environments, enabling more complex AI tasks to be handled while maintaining user privacy.

https://security.apple.com/blog/expanding-pcc

StopTheMadness Browser Extension

, , , ,

StopTheMadness Pro is a web browser extension developed by Jeff Johnson of Underpass App Company that prevents common website annoyances and privacy violations, such as blocked copy-paste, disabled contextual menus, keyboard shortcuts, autoplaying videos, and URL tracking parameters. Compatible with Safari on iOS, iPadOS, macOS, and other major browsers, it enhances user control over browsing without functioning as an ad blocker or userscript manager. The extension has received praise from various tech reviewers for restoring typical browser functionalities that many websites try to restrict.

https://underpassapp.com/StopTheMadness/

Scroll to Top