Stay sharp, Digital Defenders! 🛡️

It’s a bad week to go on autopilot. Cybercriminals are hiding behind your Wi-Fi. AI tools are writing malware on demand. And the White House just scrapped key cyber protections. 

Oh, and don’t forget to vote in the poll at the end: How do you respond when you find out your data’s been breached?

Here’s what you need to know:

Zero-Day Download

New Apple Malware Steals Passwords Without a Trace

A new Apple-focused malware called AMOS (Atomic macOS Stealer) is targeting both personal and corporate users through fake CAPTCHA screens and typo-squatted support sites.  The attack blends brand impersonation with social engineering, making it especially convincing.

Source: Forbes

AMOS uses native Mac tools to stay under the radar and extract sensitive data, which can then be sold or used in larger attacks, such as ransomware. Once triggered, it executes a malicious script that collects passwords, bypasses built-in macOS security, and downloads additional malware. Russian-language code comments suggest involvement of Eastern European cybercriminals.

If your Mac suddenly asks for your password, double-check before entering anything.

White House Scraps Biden-Era Security and Encryption Plans

The White House signed an executive order reversing major cybersecurity initiatives launched by the Biden administration, including software security attestations, AI-assisted cyber defense pilots, and post-quantum encryption rollouts. 

The move eliminates requirements for federal contractors to prove adherence to secure development practices. It also removes provisions for testing AI models and the adoption of quantum-safe encryption across agencies. Biden-era directives promoting phishing-resistant authentication, digital identity tools, and secure email protocols were also rolled back. 

If your organization works with federal agencies or relies on vendor security guarantees, reassess your software supply chain and consider conducting internal security audits to address any gaps.

Malware Hidden in Popular Code Libraries Hits Millions of Developers Worldwide

Hackers planted malware in widely used npm and PyPI packages. Many of the infected packages were tied to GlueStack and @react-native-aria, which have been collectively downloaded roughly 1 million times. 

The infected code can steal passwords, take screenshots, and even delete entire projects. Some npm packages triggered full system wipes with a single hidden command, and a fake Instagram tool on PyPI secretly collected login info and shared it with multiple bot networks. 

If your team builds with open source, now’s the time to audit your dependencies…and fast.

Share this newsletter!

Snackable Bytes

🛡️ This section contains sponsored cybersecurity insights. Advertise with us!

Threat Tracker

AI-Powered ‘Vibe Hacking’ Emerges as Major Cybersecurity Threat

Hackers are tapping into generative AI to launch faster, smarter attacks. No deep coding skills required. This growing trend, known as vibe hacking, allows users to describe the malware they want and receive working code in seconds. 

Source: AI Fire

Jailbroken versions of mainstream AIs and blackhat tools like FraudGPT and WormGPT make it easy to bypass safeguards. Skilled attackers can use these tools to scale up their operations and generate adaptive malware that rewrites itself during the attack. Some AI systems like XBOW already outperform humans on bug bounty leaderboards.

Now’s the moment to review your AI exposure, retrain your staff, and invest in threat intel that can evolve just as fast as the attacks.

OpenAI Threat Report Reveals Weaponization of AI Tools 

OpenAI’s latest threat report highlights growing misuse of its AI models by actors in China, Russia, Iran, and beyond. 

In one China-linked case, ChatGPT was used to generate political posts in English, Chinese, and Urdu to mimic organic engagement. Another case involved AI-assisted password cracking and research into U.S. defense targets. 

As video and voice models become increasingly realistic, attackers are using AI to generate fake speeches, cloned voices, and synthetic videos that can deceive on a large scale.

Start training your team to verify sources, question authenticity, and recognize AI-manipulated content before it spreads.

Cybercriminals Shift to Residential Proxies to Evade Detection, Bypass Crackdowns

As law enforcement cracks down on bulletproof hosting, cybercriminals are getting creative. They’re now hijacking residential proxy networks and routing their traffic through everyday gadgets, such as dusty Android phones and worn-out laptops. 

These proxies provide rotating IP addresses tied to actual homes and offices. Law enforcement has fewer tools to trace these attacks, since proxy services often avoid logging and scatter activity across thousands of unwitting devices.

If your threat detection tools still rely on static IP blocklists, it’s time to upgrade. Ensure your team can identify behavioral anomalies, not just incorrect addresses.

Security Tip of the Day

A Data Breach Is Just the Beginning

Think of a data breach not as a one-off event, but as the first link in a criminal supply chain. Once stolen, your personal or corporate data can travel through layers of dark web markets, where it's bought, repackaged, and weaponized.

Source: The Hippie Hacker / YouTube

Here’s how to break the chain early:

Data is power, and in the wrong hands, it’s a weapon. Guard yours.

Security Question of the Day

What’s your post-breach panic move?

Results from Yesterday's Security Question of the Day

What's your player level when it comes to password security? 

Meet Our Writers:

Greg Parker

Greg Parker is a cybersecurity and emerging tech writer who explores the intersection of digital risk, human behavior, and innovation across sensing and security technologies.

Secure your spotlight and Advertise in Cybersecurity Insider!

Cybersecurity Insider is a TechnologyAdvice business

© 2025 TechnologyAdvice, LLC. All rights reserved.

TechnologyAdvice, 3343 Perimeter Hill Dr., Suite 100, Nashville, TN 37211, USA.

Want to change how you receive these emails? Update your preferences or unsubscribe here.