MUST READ

Critical Fortinet FortiClient EMS flaw exploited for Remote Code Execution

 | 

New macOS Infinity Stealer uses Nuitka Python payload and ClickFix

 | 

Russia-linked APT TA446 uses DarkSword exploit to target iPhone users in phishing wave

 | 

Urgent Alert: NetScaler bug CVE-2026-3055 probed by attackers could leak sensitive data

 | 

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 90

 | 

Security Affairs newsletter Round 569 by Pierluigi Paganini – INTERNATIONAL EDITION

 | 

Apple issues urgent lock screen warnings for unpatched iPhones and iPads

 | 

ShinyHunters claims the hack of the European Commission

 | 

Iran-linked group Handala hacked FBI Director Kash Patel’s personal email account

 | 

U.S. CISA adds a flaw in F5 BIG-IP AMP to its Known Exploited Vulnerabilities catalog

 | 

The European Commission confirmed a cyberattack affecting part of its cloud systems

 | 

New AITM phishing wave hijacks TikTok Business accounts

 | 

CISA and BSI warn orgs of critical PTC Windchill and FlexPLM flaw

 | 

U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog

 | 

China-linked Red Menshen APT deploys stealthy BPFDoor implants in telecom networks

 | 

U.S. CISA adds a Langflow flaw to its Known Exploited Vulnerabilities catalog

 | 

Coruna exploit reveals evolution of Triangulation iOS exploitation framework

 | 

Researchers uncover WebRTC skimmer bypassing traditional defenses

 | 

Russian authorities arrest alleged LeakBase admin behind stolen data marketplace

 | 

Russian national convicted for running botnet used in attacks on U.S. firms

 | 

Infinity Stealer

Pierluigi Paganini March 30, 2026
New macOS Infinity Stealer uses Nuitka Python payload and ClickFix

Infinity Stealer targets macOS via fake Cloudflare CAPTCHA, using Nuitka; first such campaign per Malwarebytes. Researchers at Malwarebytes spotted a new macOS infostealer, named Infinity Stealer, using a Python payload compiled with Nuitka. It spreads via ClickFix, tricking users with fake Cloudflare CAPTCHA pages. “A fake verification page instructs the visitor to open Terminal, paste […]

newsletter

Subscribe to my email list and stay
up-to-date!

recent articles

Critical Fortinet FortiClient EMS flaw exploited for Remote Code Execution

Security / March 30, 2026

New macOS Infinity Stealer uses Nuitka Python payload and ClickFix

Security / March 30, 2026

Russia-linked APT TA446 uses DarkSword exploit to target iPhone users in phishing wave

APT / March 30, 2026

Urgent Alert: NetScaler bug CVE-2026-3055 probed by attackers could leak sensitive data

Hacking / March 29, 2026

SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 90

Malware / March 29, 2026