LIVE · cybersecurity feed
Live wire

rust

macoshigh

macOS Backdoor Uses Fake Messages to Evade AI Analysis

A newly identified Rust implant for macOS, dubbed macOS.Gaslight, employs a novel technique to evade security analysis. It embeds a collection of fabricated system error messages designed to mislead AI-powered triage tools into aborting their analysis. The malware communicates via a Telegram bot and exhibits self-deleting capabilities for its sensitive tokens.

CVE-2024-27227high

Bringing Rust to the Pixel Baseband

Google is enhancing the security of its Pixel devices by integrating a memory-safe Rust-based DNS parser into the cellular modem firmware. This move aims to mitigate memory-safety vulnerabilities, a significant risk in the complex and remotely attackable modem code. The company hopes this initiative will encourage the wider adoption of memory-safe languages in low-level system programming.