'CrashStealer' malware poses as an Apple tool to steal passwords & Mac data

appleinsider.com Jul 13, 2026

‘CrashStealer’ malware poses as an Apple tool to steal passwords & Mac data

Curated by Shubham · TechCapsules · Jul 13, 2026

AI-summarised brief · reviewed before publication

CrashStealer, a new Mac infostealer, disguises itself as an Apple tool to steal passwords, browser data, and cryptocurrency credentials. It spreads via a signed, Apple-notarized app called Werkbit, which bypasses security checks. Jamf Threat Labs identified the malware in May and confirmed its presence in July. Apple revoked the app’s signing credentials after being informed. Victims must manually download and launch the app for the malware to activate.

💡 Why It Matters

· The use of Apple-notarized software to deliver malware shows how attackers are exploiting trusted digital signatures to bypass security.
· This incident highlights the risks of downloading apps outside the App Store, even if they appear legitimate.

Capsules Cybersecurity

Read full article on appleinsider.com

Tracking The AI Revolution: Innovation And Cyber Risks

Artificial intelligence is evolving into core infrastructure, reshaping economies, governments, businesses and daily life at an unprecedented speed that analysts call an “Acceleration Era.” The technology’s convergence with cloud computing, the Internet of Things and other advanced tools promises massive gains in productivity, healthcare breakthroughs and human augmentation. At the same time, AI introduces heightened cyber threats, opaque “black‑box” decision‑making, bias risks and the potential for misuse in misinformation campaigns and automated attacks. Experts argue that AI serves as both a defensive asset for cybersecurity and a potent weapon for adversaries. To capture its benefits while curbing dangers, the article urges the adoption of security‑by‑design principles and comprehensive governance frameworks from the earliest stages of AI development.

💡 Without built‑in safeguards, AI’s dual‑use nature could turn the very tools meant to protect networks into vectors for large‑scale cyber assaults.

windowslatest.com · Jul 14

Microsoft admits AI is exploiting Windows 11 bugs in hours, warns against…

Microsoft warned that attackers are using AI to exploit Windows 11 flaws within hours, urging users not to postpone updates beyond three days. The company’s June 2026 Patch Tuesday fixed 206 issues, including six zero‑days, marking a sharp rise from earlier months. Microsoft’s own AI platform, MDASH, employs over 100 agents to scan code and achieved an 88.45 % success rate, recently uncovering a remote use‑after‑free bug in tcpip.sys. Director Jeremy Chapman said deferring security patches “shouldn’t be” a common practice and recommended a maximum two‑day grace period. While Windows traditionally allowed flexible deferral, the accelerating discovery and exploitation of vulnerabilities has forced Microsoft to push faster deployment of cumulative updates. Enterprises relying on legacy systems are urged to automate compliance checks.

💡 By compressing the update window, Microsoft forces attackers into a race they can’t win, turning AI from a weapon into a defensive asset.

theregister.com · Jul 14

German firm files for insolvency, blames cybercrims who shut down production for…

German textile finishing firm ZEGO Textilveredelungszentrum filed for insolvency after a March 29 cyberattack halted production for nearly six weeks, exhausting its financial reserves. The Bavaria‑based company, which serves automotive, workwear and technical‑textile customers, said the disruption alone made recovery impossible, despite attempts to mitigate losses. Managing director Johannes Zenglein called the filing the toughest decision in the company’s 37‑year history. ZEGO did not disclose the attack’s nature, perpetrators or data breach details, only that operational downtime forced the insolvency petition. Administrators will seek to restructure the business, maintain operations and preserve jobs while suppliers and customers are kept informed. The case joins a growing list of firms citing cyber‑incursions as the direct cause of collapse for the German economy.

💡 The incident shows that a single cyber breach can instantly dismantle a long‑standing manufacturing enterprise, forcing a rethink of mandatory cyber‑risk safeguards.

theregister.com · Jul 14

German firm files for insolvency, blames cybercrims who shut down production for…

German textile finishing specialist ZEGO Textilveredelungszentrum filed for insolvency after a cyberattack on March 29, 2026 halted production for six weeks. The Bavaria‑based firm, which serves automotive, workwear and technical‑textile customers, said the operational shutdown created financial strain that exhausted all mitigation options. Managing director Johannes Zenglein described the filing as one of the toughest decisions in the company’s 37‑year history. ZEGO did not disclose the attack’s method, perpetrators or data loss, but emphasized that the loss of output alone forced the insolvency request. Administrators will now seek to restructure the business, maintain production, and preserve jobs while suppliers and customers are kept informed. The case joins a growing list of firms whose collapse is attributed to cyber‑induced operational failure.

💡 The collapse underscores how a single cyber‑induced production halt can erase decades of profitability, prompting insurers and regulators to reassess coverage and mandatory resilience standards for manufacturing firms.

darkreading.com · Jul 14

GigaWiper Lets Threat Actors Choose Their Own Destructive Attack

Researchers have identified a new modular malware family called GigaWiper, which merges backdoor functionality with multiple destructive payloads such as disk wiping, fake ransomware and system sabotage. First observed during a wiper campaign in October 2025, the implant initially appeared to be a Golang‑based backdoor before analysis revealed its composite architecture. GigaWiper’s design lets threat actors issue on‑demand commands after gaining network access, selecting the level of destruction they desire. Microsoft’s Threat Intelligence team, referencing the Google Threat Intelligence Group’s “BlueRabbit” tracking, confirmed the overlap and noted that Binary Defense linked the tool to an Iran‑based actor, though no official attribution was made. The modular approach reduces operational overhead while maximizing impact, marking a shift in how wiper malware is deployed.

💡 By bundling espionage and sabotage capabilities, GigaWiper lets attackers tailor devastation in real time, forcing defenders to confront a more adaptable and stealthy threat surface.

therobotreport.com · Jul 14

Yaskawa America gets information security certification

Yaskawa America Inc., the U.S. arm of Japanese automation leader Yaskawa, announced it has earned ISO/IEC 27001:2022 certification after a three‑year, cross‑functional effort. The independent audit by Eagle Certification Group, the first under its new ANAB‑accredited program, validated the company’s information security management system across technology, operations and organizational practices. Vice president David Troeter said the credential underscores Yaskawa’s commitment to safeguarding customer data as manufacturers adopt connected robotics and software. The Motoman Robotics Division, which has installed more than 600,000 robots worldwide, highlighted the certification as proof of its long‑term focus on risk management, employee awareness and continuous improvement. Yaskawa expects the standard to support customers’ supplier‑security requirements and reinforce trust in its automation solutions throughout their global operations worldwide.

💡 By meeting ISO 27001, Yaskawa positions itself as a secure supplier for manufacturers racing to integrate IoT‑enabled robots, a prerequisite for many enterprise procurement policies.