A new malware named PamStealer is spreading via fake websites impersonating the Maccy clipboard tool. It exploits macOS's PAM (Pluggable Authentication Module) to intercept and steal user login credentials. This highlights a growing trend of targeted attacks on Mac users through deceptive download sites and credential theft.

Ransomware attackers are leveraging a new set of techniques, including exploitation of the Citrix Bleed 2 vulnerability, bring-your-own-vulnerable-driver (BYOVD) methods, and stolen supply chain credentials. These tactics allow them to evade defenses and gain deeper access to networks. The shift highlights the escalating sophistication of ransomware campaigns, posing increased risk to organizations relying on widely used software and third-party integrations.

This week's ThreatsDay roundup covers AI compute hijacking, a flaw in Apple's email system, and the BlueHammer ransomware, along with 14 other cybersecurity stories. The collection highlights emerging risks across technology platforms, urging organizations and individuals to review defenses against these specific threats.

Bruce Schneier's weekly squid feature shares a rare video of an Arctic bobtail squid. The post highlights the creature's distinctive appearance and behavior. It offers a brief, interesting glimpse for marine life enthusiasts.

The article details the challenges and setbacks encountered while building or growing a technology venture. It emphasizes the value of perseverance and learning from failure. These lessons offer practical insight for entrepreneurs and developers facing similar difficulties.

This analysis examines how AI platforms like Claude are being adopted in security operations centers, separating hype from genuine utility. It explains why security teams feel pressured to use AI, known as FOMO, and where these tools actually deliver practical value. This matters for security leaders making tooling and workflow decisions.

A blog post highlights how a squid contributed to the identification of previously unknown marine species. This underscores how everyday encounters can lead to significant biological discoveries in ocean research.

Security expert Bruce Schneier offers a straightforward method for evaluating whether to use AI for a given task. The framework helps people weigh cost, time, and reliability factors before turning to AI tools. It provides a practical guide for making more informed decisions in everyday work and life.

Cognyte, a surveillance technology company, has sold a mobile van designed for cell phone interception. This equipment allows for tracking and monitoring of mobile devices. The sale underscores the continued market for physical surveillance tools used by governments and law enforcement.