Daily Digest | 20 July 2026

Your daily dose of Privacy, Data Protection, AI & Cybersecurity news.

5 stories you should not miss.

Read more: https://www.nicfab.eu/daily-digest/

#Privacy #AI #GDPR #Cybersecurity #TechLaw

Weekly macOS & iOS threat update: July 13–20, 2026

A newly documented Mac infostealer called ClickLock is using fake human-verification pages to trick people into pasting malicious commands into Terminal.

Once launched, it can repeatedly close Finder, Terminal, Activity Monitor, and System Settings while displaying a fake password prompt. It also targets browser data, the macOS Keychain, password managers, and cryptocurrency wallets.

The practical rule is simple: a legitimate website won’t ask you to paste a command into Terminal to prove you’re human.

Apple is also facing a proposed class action over Hide My Email. The lawsuit alleges that some masked addresses could be linked to a user’s real email address. These claims haven’t been proven in court.

#MacSecurity #macOS #Cybersecurity

Alt...

Intego graphic reading “Weekly macOS & iOS Threat Update” with the date July 13-20, 2026, on a light blue background with a large shield icon.

The problems with Google Pixel price hikes

Like everything else in the tech industry, Google’s Pixel 11 series appears to be getting a price hike, but there are a few factors that make this one a bit harder to accept. This issue of 9to5Google Weekender is a part…

https://9to5google.com/2026/07/12/google-pixel-price-hike-problems/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Google [9to5Google]

Critical #NGINX #Vulnerability Can #Crash Workers and May Allow Remote Code Execution

source: thehackernews.com/2026/07/crit…

The #overflow lives in nginx's #script engine, the code that assembles strings from directives at request time. It only surfaces under a specific #configuration: a regex-based map whose output variable is referenced in a #string expression after a capture from an earlier #regex match.

#web #www #internet #online #exploit #hack #hacker #cybersecurity #news #webserver #server #security #software #bug

Pixel 11 Pro Fold in ‘Pine’ leaks & could Pixel Glow just be the camera flash?

With the launch event one month away, Pixel 11 leaks are picking up, and we now have a look at the “Pine” color for the 11 Pro Fold.

https://9to5google.com/2026/07/12/pixel-11-pro-pine-color-leak/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Google [9to5Google]

Ponad połowa pracowników korzysta w pracy z niezatwierdzonych narzędzi AI, a nawet co dziesiąty świadomie udostępnia poufne informacje firmowe za pomocą tych... https://linuxiarze.pl/ponad-polowa-pracownikow-korzysta-w-pracy-z-niezatwierdzonych-narzedzi-ai/ #cybersecurity #sztucznainteligencja

Possible Phishing 🎣
on: ⚠️hxxps[:]//alamantourandtravels[.]com/myCSS
🧬 Analysis at: https://urldna.io/scan/6a5da5203b77500004426656
#cybersecurity #phishing #infosec #urldna #scam #infosec

Ponad połowa pracowników korzysta w pracy z niezatwierdzonych narzędzi AI, a nawet co dziesiąty świadomie udostępnia poufne informacje firmowe za pomocą tych... https://linuxiarze.pl/ponad-polowa-pracownikow-korzysta-w-pracy-z-niezatwierdzonych-narzedzi-ai/ #cybersecurity #sztucznainteligencja

🎣 Phishing Spotlight

facebook-khqi4s[.]pages[.]dev

🔗 https://beesint.com/pulse/cb26bef0-0d29-4599-a60a-5f4911eefb15

#OSINT #Phishing #ThreatIntel #CyberSecurity

Hugging Face Production Infrastructure Breached by Autonomous AI Agent

Hugging Face disclosed a data breach after an autonomous AI agent exploited code-execution flaws in its data-processing pipeline, collected cloud and cluster credentials, and moved laterally across internal clusters. The company used a self-hosted open-weight AI model for forensic analysis after commercial AI services blocked requests containing real attack artifacts.

****
#cybersecurity #infosec #incident #databreach
https://beyondmachines.net/event_details/hugging-face-production-infrastructure-breached-by-autonomous-ai-agent-h-1-j-6-l/gD2P6Ple2L

Exploit brokers pay $500k for WordPress RCEs. I found one with GPT5.6 and $25

https://slcyber.io/research-center/exploit-brokers-pay-500000-for-a-wordpress-rce-i-found-one-with-gpt5-6/

Comments: https://news.ycombinator.com/item?id=48975665

#HackerNews #ExploitBrokers #WordPress #RCE #CyberSecurity #GPT5 #Hacking

In a shocking twist of fate, it turns out you don't need half a million bucks or elite hacker skills to discover #WordPress vulnerabilities; just toss $25 at #GPT5.6 and let it work its magic. 🤖💸 Who knew the future of #cybersecurity was this hilariously #cheap and easy? 🙃
https://slcyber.io/research-center/exploit-brokers-pay-500000-for-a-wordpress-rce-i-found-one-with-gpt5-6/ #Vulnerabilities #Hacking #Made #Easy #Solutions #HackerNews #ngated

@Linuxiarze
Brawo, jestem za.

#cybersecurity #sztucznainteligencja

Hugging Face: Security incident disclosure — July 2026. “Earlier this week, we detected and responded to an intrusion into part of our production infrastructure. This one was different from anything we had handled before in one important way: it was driven, end to end, by an autonomous AI agent system – and we detected and dissected it largely with AI of our own.”

La rivoluzione partecipata di A.I.P.S.: Intervista a Leonardo Lomma, Presidente nazionale A.I.P.S. Formazione tecnica, qualita' certificata, cybersecurity e manutenzione programmata: questi i temi al centro dell'intervista a Leonardo Lomma, nuovo Presidente nazionale di A.I.P.S., Associazione Installatori Professionali Sicurezza. Lomma...
#LeonardoLomma #AIPS #cybersecurity #security #sicurezza http://dlvr.it/TTcVFV

YouTube picture-in-picture (PiP) mode is broken on iPhone, Android

YouTube is aware of an issue on Android and iPhone where picture-in-picture (PiP) mode does not activate when closing the app.

https://9to5google.com/2026/07/18/youtube-pip-broken/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Is Apple One worth it for you after recent price hikes?

Yesterday, Apple announced price increases for Apple Music as well as two of its Apple One bundles. Apple offers a broad range of services nowadays, ranging from Apple TV to Apple Music, Apple Fitness+, and more. Apple …

https://9to5mac.com/2026/07/18/is-apple-one-worth-it-for-you/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Apple is raising prices on more than just Macs and iPads

Apple’s hardware price increases in June were costly and unwelcome. They were also just the start of a wave of higher prices on Apple products and services. Over the last few weeks, Apple has been raising prices in all …

https://9to5mac.com/2026/07/18/here-are-all-the-ways-apple-is-raising-prices-and-why/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Apple’s scrapped Mac Pro plans reportedly included a new Intel model

In March, Apple announced it was discontinuing the Mac Pro and confirmed that it had no plans to offer future Mac Pro hardware. A new report from Bloomberg today offers more context on Apple’s Mac Pro strategy, with a s…

https://9to5mac.com/2026/07/19/apples-scrapped-mac-pro-plans-reportedly-included-an-intel-model/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Apple testing ‘Live Notes’ AI system to record Genius Bar sessions: report

Apple is reportedly piloting a new “Live Notes” system at some of its retail locations. This system uses AI to record and transcribe Genius Bar sessions with customers, according to a new report.

https://9to5mac.com/2026/07/19/apple-testing-live-notes-ai-system-to-record-genius-bar-sessions-report/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Possible Phishing 🎣
on: ⚠️hxxps[:]//knub-refix[.]weebly[.]com/
🧬 Analysis at: https://urldna.io/scan/6a5d10a93b7750000431c2ef
#cybersecurity #phishing #infosec #urldna #scam #infosec

iOS 27 makes your iPhone faster in 30+ ways

The iOS 27 public beta is now available, and one of the big changes is that it makes your iPhone a lot faster. In fact, Apple has outlined more than 30 ways in which your iPhone will be faster after you update.

https://9to5mac.com/2026/07/19/ios-27-makes-your-iphone-faster-in-30-ways-heres-the-full-list/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Google asks for Gemini app feedback & details top 10 requests

Yesterday, Google’s Josh Woodward asked for what fixes Gemini app users want. The Gemini lead today identified the top 10 requests and Google’s progress.

https://9to5google.com/2026/07/09/gemini-app-feedback/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Google [9to5Google]

Possible Phishing 🎣
on: ⚠️hxxps[:]//golwsed6542fdyhdt[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a5d490b3b7750000431c3a4
#cybersecurity #phishing #infosec #urldna #scam #infosec

Novel Starland RAT and bespoke WLDR C2 implant deployed in financially motivated campaign

Pulse ID: 6a5da9d4076c1cc8aa050fe2
Pulse Link: https://otx.alienvault.com/pulse/6a5da9d4076c1cc8aa050fe2
Pulse Author: Tr1sa111
Created: 2026-07-20 04:53:40

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #RAT #bot #Tr1sa111

ClickLock Stealer: Paste Once, Lose Everything

Pulse ID: 6a5da9bacf5d7028dbe4c942
Pulse Link: https://otx.alienvault.com/pulse/6a5da9bacf5d7028dbe4c942
Pulse Author: Tr1sa111
Created: 2026-07-20 04:53:14

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #Tr1sa111

Unpacking the AsyncAPI npm supply chain compromise and import-time payload delivery

Pulse ID: 6a5da9b34cf5013cd5cdbd30
Pulse Link: https://otx.alienvault.com/pulse/6a5da9b34cf5013cd5cdbd30
Pulse Author: Tr1sa111
Created: 2026-07-20 04:53:07

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #NPM #OTX #OpenThreatExchange #SupplyChain #bot #Tr1sa111

Introducing CylindricalCanine: The GoldenEyeDog subgroup responsible for the April DigiCert incident

Pulse ID: 6a5da9a3af452b6f2615411e
Pulse Link: https://otx.alienvault.com/pulse/6a5da9a3af452b6f2615411e
Pulse Author: Tr1sa111
Created: 2026-07-20 04:52:51

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #Tr1sa111

TELEPUZ: a modular MaaS malware spreading via CLICKFIX-VIDAR chains

Pulse ID: 6a5da9abd564e7ff30cd985e
Pulse Link: https://otx.alienvault.com/pulse/6a5da9abd564e7ff30cd985e
Pulse Author: Tr1sa111
Created: 2026-07-20 04:52:59

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #MaaS #Malware #OTX #OpenThreatExchange #Vidar #bot #Tr1sa111

​​Kratos PhaaS Targets US and EU: How to Reduce Microsoft 365 Account Takeover Risk​

Pulse ID: 6a5daa1c02cc5f39f1740f37
Pulse Link: https://otx.alienvault.com/pulse/6a5daa1c02cc5f39f1740f37
Pulse Author: Tr1sa111
Created: 2026-07-20 04:54:52

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #Microsoft #OTX #OpenThreatExchange #RAT #bot #Tr1sa111

Contagious Interview malware in SVG images: DPRK campaign

Pulse ID: 6a5daa159afa8ff8f48b9816
Pulse Link: https://otx.alienvault.com/pulse/6a5daa159afa8ff8f48b9816
Pulse Author: Tr1sa111
Created: 2026-07-20 04:54:45

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #DPRK #InfoSec #Malware #OTX #OpenThreatExchange #SVG #bot #Tr1sa111

Botnet Analysis: A Product-Grade Threat for the AI Service Era

Pulse ID: 6a5daa0fd86bc37067fdd7ce
Pulse Link: https://otx.alienvault.com/pulse/6a5daa0fd86bc37067fdd7ce
Pulse Author: Tr1sa111
Created: 2026-07-20 04:54:39

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #botnet #Tr1sa111

Behind the Refund: From GST Phishing to Remcos RAT Through a Multi-Stage .NET Infection Chain

Pulse ID: 6a5daa09eeb193cfd7870df9
Pulse Link: https://otx.alienvault.com/pulse/6a5daa09eeb193cfd7870df9
Pulse Author: Tr1sa111
Created: 2026-07-20 04:54:33

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #NET #OTX #OpenThreatExchange #Phishing #RAT #Remcos #RemcosRAT #bot #Tr1sa111

ACR Stealer: Two observed intrusion chains amid increased threat activity

Pulse ID: 6a5daa03d37bef6cdd28ed25
Pulse Link: https://otx.alienvault.com/pulse/6a5daa03d37bef6cdd28ed25
Pulse Author: Tr1sa111
Created: 2026-07-20 04:54:27

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #Tr1sa111

The Patch Wars have begun

Pulse ID: 6a5da9fdad5c523858635a4a
Pulse Link: https://otx.alienvault.com/pulse/6a5da9fdad5c523858635a4a
Pulse Author: Tr1sa111
Created: 2026-07-20 04:54:21

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #Tr1sa111

GoSerpent backdoor attacks in Southeast Asia

Pulse ID: 6a5da9f6cca6893d15b08f9c
Pulse Link: https://otx.alienvault.com/pulse/6a5da9f6cca6893d15b08f9c
Pulse Author: Tr1sa111
Created: 2026-07-20 04:54:14

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#Asia #BackDoor #CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #Tr1sa111

HelloNet campaign: a threat via the ViPNet update system

Pulse ID: 6a5da9efb1a15d3bf4632c28
Pulse Link: https://otx.alienvault.com/pulse/6a5da9efb1a15d3bf4632c28
Pulse Author: Tr1sa111
Created: 2026-07-20 04:54:07

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #OTX #OpenThreatExchange #bot #Tr1sa111

The TTF Trap: A Global Campaign of a Low-Detection Lua Loader

Pulse ID: 6a5da9e6920dc47b91cd7f90
Pulse Link: https://otx.alienvault.com/pulse/6a5da9e6920dc47b91cd7f90
Pulse Author: Tr1sa111
Created: 2026-07-20 04:53:58

Be advised, this data is unverified and should be considered preliminary. Always do further verification.

#CyberSecurity #InfoSec #LUA #OTX #OpenThreatExchange #bot #Tr1sa111

Car Keys in Apple Wallet reportedly coming to major Chinese automaker

As Apple continues expanding Car Keys support across the auto industry, the feature now appears to be headed to select vehicles from a major Chinese automaker. Here are the details.

https://9to5mac.com/2026/07/17/car-keys-in-apple-wallet-reportedly-coming-to-major-chinese-automaker/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Apple in talks to settle DOJ antitrust lawsuit, per report

Back in 2024, the US Department of Justice filed a lawsuit against Apple, accusing the company of a “smartphone monopoly.” Apple has voiced its opposition to the case many times over the last two years. Now, a Bloomberg…

https://9to5mac.com/2026/07/17/apple-in-talks-to-settle-doj-antitrust-lawsuit-per-report/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

OpenAI tweaks chat access in the ChatGPT app for Mac

OpenAI has updated its recently redesigned ChatGPT app for Mac to make chats easier to access once again. Here are the details.

https://9to5mac.com/2026/07/17/openai-fixes-chat-access-in-the-chatgpt-app-for-mac/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Apple raises prices for Apple Music and Apple One subscriptions

Apple has raised the price of Apple Music today in the United States and other countries. Starting today, Apple Music’s Individual plan now costs $11.99 per month, up from $10.99. Apple has also increased the price of s…

https://9to5mac.com/2026/07/17/apple-raises-prices-for-apple-music-and-apple-one-subscriptions/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Possible Phishing 🎣
on: ⚠️hxxps[:]//webmailacademiedijon[.]weebly[.]com
🧬 Analysis at: https://urldna.io/scan/6a5d34a93b77500008468fc2
#cybersecurity #phishing #infosec #urldna #scam #infosec

A new OpenSSL HollowByte vulnerability enables remote DoS attacks using just 11 bytes. Learn how to protect your servers against this OpenSSL DoS attack.

#OpenSSL #HollowByte #DoSAttack #CyberSecurity

https://securityonline.info/openssl-hollowbyte-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

Google: 2,048 CVEs tracked. 87% unpatched. 20 CISA KEV exploited in wild. Trust Score: C. ADB is powerful but risky. Patch your Android devices NOW. #Google #Android #cybersecurity

https://www.valtersit.com/vendors/google/

9to5Mac Overtime 073: iOS 27 Public Beta

Jeff and Fernando discuss the iOS 27 Public Beta, some of their favorite new iOS 27 new features, and whether or not people should consider installing it on their main device. The pair also talks about ChatGPT vs Siri A…

https://9to5mac.com/2026/07/17/9to5mac-overtime-073-ios-27-public-beta/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Apple ordered to remove 8 AI nonconsensual undressing apps from the App Store [U]

Update, 4:29 p.m. ET: Apple reached out to 9to5Mac with more information, which you can find below the original post. San Francisco city attorney David Chiu has sent cease-and-desist letters to Apple and Google, demandi…

https://9to5mac.com/2026/07/17/apple-ordered-to-remove-8-ai-nonconsensual-undressing-apps-from-the-app-store/

#Tech #Technology #TechNews #AI #Gadgets #Software #Cybersecurity #Apple #Google #Microsoft #Startup #OpenSource #9to5Mac [9to5Mac]

Possible Phishing 🎣
on: ⚠️hxxps[:]//jx-instagram[.]com
🧬 Analysis at: https://urldna.io/scan/6a5cae423b775000074f7a52
#cybersecurity #phishing #infosec #urldna #scam #infosec