Off-topic for aiqbench

This story was gathered from a source we follow but falls outside AI and quantum coverage, so there is no aiqbench take for it.

XCSSET v40 Abuses Chrome DevTools Protocol to Steal Cookies and Run Commands

Cybersecurity NewsAugust 3, 20264 min read

XCSSET has returned with a way to target macOS developers. The latest version, v40, hides inside poisoned Xcode projects and can turn a local build into a supply-chain compromise. Once activated, it can spread through other projects, raising risk for developers and the organizations that use their code. The malware family was first documented in […] The post XCSSET v40 Abuses Chrome DevTools Protocol to Steal Cookies and Run Commands appeared first on Cyber Security News.

XCSSET has returned with a way to target macOS developers. The latest version, v40, hides inside poisoned Xcode projects and can turn a local build into a supply-chain compromise. Once activated, it can spread through other projects, raising risk for developers and the organizations that use their code. The malware family was first documented in 2020, but its campaign shows a move toward stealth and scale. It uses memory-based execution, changing payloads,…

Excerpt shown under the publisher's RSS terms · 72 words · full text and figures are on the publisher's site

Read at Cybersecurity News ↗Ask about this article