Loading story…
Apple disclosed that macOS Tahoe 26.1 fixed a Terminal issue that allowed ANSI escape sequences in rendered output to trigger DNS requests, creating a path for data exfiltration when attacker-controlled content was displayed in the terminal. The flaw was reported in December 2024 and was later documented in Apple's broader macOS security bulletin, which lists numerous fixes across privacy protections, sandboxing, privilege boundaries, memory safety, Gatekeeper restrictions, and denial-of-service conditions.
A public write-up showed how the behavior could be abused through an LLM-enabled CLI workflow: malicious spreadsheet content influenced the model's output, which included escape codes that macOS Terminal interpreted as DNS lookups carrying stolen data. The researcher said the issue demonstrates that terminal-rendered model output must be treated as untrusted input, while Apple's bulletin indicates the fix shipped in Tahoe 26.1 alongside many other vulnerability patches affecting both Apple components and some bundled third-party open-source software.
Get the actors, campaigns, and ATT&CK mapping behind it.
4 events from the most recent confirmed update back to the earliest known activity.
Apple made a further update to the macOS Tahoe 26.1 security bulletin, continuing to revise the published details of fixed vulnerabilities.
Apple later updated its macOS Tahoe 26.1 security bulletin to revise the documented security content for the release.
Apple released macOS Tahoe 26.1, addressing numerous vulnerabilities across the OS. The release included the fix for the macOS Terminal behavior that allowed ANSI escape sequences to trigger DNS lookups.
A researcher reported to Apple that macOS Terminal could interpret ANSI escape sequences in attacker-controlled output and trigger DNS requests, enabling DNS-based data exfiltration.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
Get the adversaries, campaigns, and ATT&CK mapping behind this technique, with detections ready to deploy.
2 references tracked. Mallory keeps watching after this page renders.
Map indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Apple released security updates for **macOS Tahoe 26.6.1**, **Sequoia 15.7.9**, and **Sonoma 14.8.9** to fix a Screen Sharing vulnerability that could let an attacker on the same network authenticate without valid credentials. The issue appears to primarily affect Macs where Screen Sharing has been explicitly enabled, and Apple said there is no evidence it has been exploited in the wild. Apple also noted that Tahoe 26.6.1 includes broader security fixes available through the standard Software Update mechanism. The updates follow disclosure of **`CVE-2026-39875`**, a CUPS flaw in macOS that allows an unprivileged local user to chain logic bugs in the privileged `cupsd` daemon and gain an arbitrary file-write capability as root. A public proof-of-concept showed how an attacker could register a malicious printer, capture and replay a valid CUPS authentication token, and abuse a `file://` device URI to write to attacker-chosen local paths outside SIP protection. Apple patched affected versions of Sonoma, Sequoia, and Tahoe, and defenders were urged to install updates quickly and watch for suspicious printer registrations, device URI changes, and print jobs targeting file-based destinations.
Aug 21, 2026
Attackers are increasingly compromising macOS systems through **ClickFix** and related social-engineering lures that trick users into pasting malicious commands into Terminal, often behind fake Cloudflare checks, bogus troubleshooting steps, fraudulent support messages, or compromised websites. A large campaign tied to hundreds of hacked WordPress sites served platform-specific payloads and used the **Polygon** blockchain to hide command-and-control locations, while the macOS payload ran largely in memory, harvested Keychain data, browser information, SSH keys, screenshots, and other files, then staged stolen data in `/tmp/osalogging.zip` before exfiltrating it. Researchers said the technique does not rely on a macOS software flaw, but on convincing victims to execute attacker-supplied commands themselves. Threat reporting indicates the tactic has become a dominant initial-access method against Mac users, especially cryptocurrency holders and developers, and that recent Apple paste warnings in Terminal have already been bypassed through Script Editor abuse. Separate intrusion research linked cryptocurrency-focused activity to malware families including **DEEPBREATH**, **SUGARLOADER**, and **CHROMEPUSH**, showing how post-compromise tooling on macOS can escalate from social engineering to broad credential and data theft by targeting `TCC.db`, Keychain contents, Chromium-based browsers, Telegram data, and Apple Notes. Security teams are being urged to prioritize behavioral detection, cross-platform response, and user controls that prevent unverified command execution on Macs.
Jul 16, 2026
Microsoft disclosed **CVE-2022-26706**, a macOS App Sandbox escape that allowed specially crafted code to bypass sandbox restrictions and execute unrestricted commands on a host. The flaw was uncovered during research into malicious macro execution in Microsoft Office on macOS, where Word’s ability to read or write files with the `~$` prefix could be chained with macOS **Launch Services** and the `open --stdin` option to launch a crafted Python file outside the sandbox. Microsoft reported the issue to Apple in October 2021, and Apple addressed it in security updates released in May 2022. The vulnerability is significant because Launch Services and related macOS startup mechanisms have repeatedly appeared in real-world malware tradecraft. MITRE ATT&CK documents **LaunchAgent** persistence under `T1543.001`, noting widespread abuse of plist files in locations such as `~/Library/LaunchAgents` and `/Library/LaunchAgents` by malware including **Bundlore, FruitFly, Proton, ThiefQuest,** and **CookieMiner**. Microsoft said its Defender for Endpoint detections remained effective against multiple Launch Services-based sandbox escape variants, underscoring the defensive value of monitoring for suspicious LaunchAgent creation and unexpected child-process execution from sandboxed applications.
Aug 15, 2026