Radar
You open your phone in the morning. Three notifications, five alarming headlines, and zero idea what you’re supposed to do about it, or even whether it’s serious. If you’ve been there, you’re in the right place.
We read everything so you don’t have to, we compile what concerns your Mac, your iPhone, your accounts, your data. Then we explain in two minutes what’s happening and what you should do about it.
Three levels depending on what’s going on, and every time, a concrete action.
ANALYSIS
Regulation, underlying trends, breakdown.
The substance, not just the froth. Long format, full context and medium-term consequences.
CSAR, ProtectEU, GDPR developments, landmark CNIL rulings.
SIGNAL
Serious threat, major update, policy change.
Nothing’s on fire, but it’s about to matter. Medium format, practical angle and prep.
Terms-of-service change, unexploited flaw, sensitive new Apple feature.
ALERT
Exploited flaw, critical patch, immediate threat.
When you have to act today. Short format, straight to the point, concrete action up top.
Critical iOS CVE, active macOS malware, exploited zero-day.
Latest published Radars
SIGNAL When iMessage fails, your messages go out in the clear When iMessage drops out, your iPhone falls back to SMS or unencrypted RCS without a real warning. Three Messages settings stop the fallback. Read the radar
When iMessage or encrypted RCS drops out, Messages moves the conversation to unencrypted RCS, SMS or MMS, in the same thread. No alert, just a discreet mention. Three iPhone settings shut these fallbacks down. An iMessage that can't go out encrypted then stays failed, and you decide whether to send it anyway.
What you need to do
1. Turn off Resend as Text Message (Retry as Text Message on some iPhones), in Settings > Apps > Messages. An iMessage that fails stays failed instead of going out as SMS.
2. Turn off RCS Messaging, in its own submenu, if you want no fallback to unencrypted RCS. You also lose encrypted RCS, where your carrier offers it. In France, Orange, SFR, Bouygues Telecom and Free offer RCS, none encrypts it on iPhone yet, so you lose no encryption.
3. Turn off MMS Messaging. Even with the SMS fallback off, Messages can still fall back to MMS.
ALERT Self-hosted Nextcloud, a Collabora flaw already exploited A critical flaw in Nextcloud's built-in Collabora opens your server without a password. Check, hunt for the intruder, update it or remove it. Read the radar
A critical flaw in Nextcloud's built-in Collabora lets anyone run commands on your server without a single password, and administrators have already found backdoors on theirs. A patched built-in Collabora has been available since September 11 for Nextcloud 30 and later, but updating it does not evict an intruder who is already in.
What you need to do
1. Check whether the built-in Collabora (the richdocumentscode app) is installed on your Nextcloud, and which version. Before version 26.4.303 of the built-in Collabora, you are exposed. A Collabora installed separately, connected through Nextcloud Office, is not affected.
2. Hunt for a backdoor before you patch, unexpected PHP files in the built-in Collabora folder and suspicious requests in your logs since September 10.
3. Update the built-in Collabora to 26.4.303 or later, or remove it. Disabling it is not enough. If your Nextcloud runs version 29 or older, this update is not offered to you, update Nextcloud first. Aim for Nextcloud 33 or later in any case, earlier versions are no longer maintained.
4. If you find an intruder, change every secret your web server can read. The commands are in the full radar.
SIGNAL Quad9 may pull out of France, get your DNS plan B ready beIN wants up to 580,000 euros a day from Quad9, which is weighing an exit from France. Nothing is settled, but your DNS deserves a second resolver. Read the radar
beIN Sports is seeking up to 580,000 euros a day from Quad9, which refuses to block pirate sites in France and is weighing cutting the country off. A ruling is expected in late October, just before Mullvad DNS shuts down on November 2. Nothing is settled, but your DNS should not depend on a single provider.
What to keep an eye on
1. The ruling of the Paris Judicial Court, expected in late October, and the response of Quad9's Foundation Council.
2. The state of your plan B, a second encrypted resolver ready before the ruling, a backup profile on iPhone, several resolvers through dnscrypt-proxy on Mac.
3. The resolver that actually answers, tested on on.quad9.net and dnscheck.tools, on Wi-Fi as well as mobile data, VPN included.
SIGNAL Signal, WhatsApp, the intruder is a linked device German investigators read WhatsApp through a rogue linked device posing as one of theirs, encryption intact. Check your WhatsApp and Signal lists. Read the radar
To read an encrypted messenger, you don't need to break the encryption. German investigators read WhatsApp by linking a rogue device to their targets' accounts, posing as one of theirs, and customs made it a permanent tool, in an order that also names Signal. Your linked devices list takes a minute to check, on both.
What you should watch
1. The list of linked devices in Signal and in WhatsApp, from your iPhone.
2. Any device you don't recognize, your old Mac included. Unlink it, and when in doubt, unlink it anyway.
3. Registration Lock on Signal and two-step verification on WhatsApp. Turn on both.
ALERT macOS root flaw, the exploit code is public A macOS flaw fixed on September 14 hands root to a plain app, and its exploit code is public. The versions to aim for, and how to check yours. Read the radar
A macOS flaw, fixed by Apple on September 14, lets a plain app become root on your Mac. Since September 21, the code to exploit it has been public on GitHub. No attack observed to date, but a Mac that isn't up to date is now an easy target.
What you need to do
1. Check your version in Apple menu > About This Mac.
2. Aim for Sequoia 15.8.1, Tahoe 26.7.1 or the latest version of Golden Gate. On Sequoia and Tahoe, these versions also fix two flaws already targeted by attacks, Screen Sharing and CoreGraphics. Update in System Settings > General > Software Update.
3. In the same screen, turn on "Install macOS updates" and the option that installs security updates and system files. And only install apps from known sources, the flaw needs a booby-trapped app to strike.
ANALYSIS Siri AI reads your apps, how to rein it in Once switched on, Siri AI reads whatever your apps open up to it. The macOS 27 and iOS 27 settings to rein it in, and the blind spots left. Read the radar
Siri AI does not switch itself on, you have to ask for it. But once it is on, it reads whatever your apps open up to it, messages, notes, calendar, without you ticking a single extra box. macOS 27 and iOS 27 bring a few ways to close some doors, provided you know where they are.
What it changes for you
1. If you want no Siri AI at all, do not turn it on, or go back to Siri Classic via Screen Time > Content & Privacy Restrictions > Siri > Allowed Siri Version. On iPhone, turn the restrictions on first.
2. On the Mac, do not look for a setting that shuts off content app by app, Apple documents none. You choose between Siri AI with whatever your apps open up to it, or Siri Classic.
3. On the iPhone, outside the EU, if you turn it on, close things off app by app in Settings > Apps > [app] > Search, by turning off "Show Content in Search". Start with Messages, Mail and Notes. "App Access", for its part, governs learning and suggestions, not the reading of your content.
ANALYSIS macOS 27 locks down your data, without a word macOS 27 quietly locks down the data of eight apps (browsers, wallets). A solid anti-theft move, but undocumented, and it breaks some backups. Read the radar
macOS 27 quietly sealed off access to the data of eight sensitive apps, four browsers, the Discord messaging app, and three crypto wallets. A third-party program you had granted full access to can, in all likelihood, no longer dig through those folders. Good news against data thieves, except Apple hasn't said a word about it anywhere, and it can break your backups silently.
What it changes for you
1. A sudden error (`Operation not permitted`) when a backup or a script reads `~/Library/Application Support/Chrome` (or Firefox, Brave) is not a bug or a dying disk, it is the new protection. Use the app's own export or sync rather than copying the folder.
2. Check that your backup really captures your browser profiles and wallet data, a tool that used to read them directly may now skip them without flinching.
3. Do not overestimate the scope, the list stops at eight apps controlled by Apple. Your third-party password manager probably is not on it.
ANALYSIS Your Apple Watch is always listening Your Apple Watch listens nonstop. Where your audio really goes, and why the Secure Exclave settles it at the silicon level. Read the radar
Your Apple Watch is always listening, and this fall, in beta and English first, it will hand you back the last fifteen seconds as text. The audio is processed in an isolated compartment on the chip, never stored, never seen by Apple. On paper, it is clean. Except no one but Apple has checked.
What it changes for you
1. Live Rewind and Siri Recap arrive this fall, English first, and they are opt-in.
2. Turn on Advanced Data Protection so your iCloud stays encrypted with your own keys.
3. If a watch that listens all the time bothers you, leave the feature off, that is the only full guarantee.
SIGNAL Google, Microsoft, one click and your MFA is toast The FBI is warning. One click on a real Google or Microsoft screen, and a stranger owns your inbox. Your password and your MFA can't help. Read the radar
The FBI is warning about OAuth consent phishing. One click on a real Google or Microsoft screen, and a booby-trapped app gets lasting access to your inbox and your files. Neither your password nor your MFA stops it, because you opened the door yourself.
What to watch for
1. Any Google or Microsoft consent screen that pops up after a link from a stranger, read what the app is asking before you approve.
2. The third-party apps already connected to your account, purge the ones you do not recognize in the security settings.
3. A suspicious access is not cut off by changing your password, you have to revoke the token in your account's security settings.
ANALYSIS One American order was enough to make autistici.org disappear The US branded the Autistici collective a terrorist group, and its .org domain was pulled from DNS by its registry. What it says about the sovereignty of your own services. Read the radar
On 26 August, the United States branded the Italian collective Autistici/Inventati a "terrorist". Dollar payment channels cut off (PayPal), and the domain autistici.org pulled from DNS by its registry in late August. The lever: .org depends on an American registry, Public Interest Registry, which can be forced to cut. .com, .net and .org are all in that situation.
What it changes for you
1. An American extension (.com, .net, .org) is seizable without a judge in your country stepping in.
2. A national domain, .ch, .eu, .fr, escapes the direct order, but the domain is only one link.
3. Sovereignty is the full stack: registry, registrar, hosting, payments. Miss one floor, and the sanction pours in.
ALERT A Mac stealer is going after your Claude sessions AMOS and other macOS stealers are going after your Claude sessions. The weak link is neither Apple nor Claude, it's the command you paste into the Terminal. Read the radar
macOS info-stealers are going after Claude sessions. Anthropic confirmed in late August that stealers, AMOS included in a few Mac cases, hijacked Claude sessions by copying the browser session. And a late-July disclosure shows that the Claude Code token, stored in the Keychain, is readable there by any program running under your account. No flaw in Apple or Claude, it gets in through a command someone makes you paste into the Terminal.
What to do now
1. A stolen session token acts on your account with no password, 2FA doesn't protect a token already issued, and it stays valid for several days, a local logout doesn't kill it. Real revocation goes through your account online, revoking all sessions and rotating your API key if you have one.
2. Two false reflexes, `chmod` does nothing against malware running under your own account, and antivirus keeps chasing a stealer that mutates non stop.
3. Set up execution control. An allowlisting tool like Santa in lockdown mode won't block the pasted line itself, but it kills the thief binary the moment it tries to run, the safeguard that acts even when you got fooled. And a command someone pushes you to paste into the Terminal, well... you don't paste it, ever.
SIGNAL ChatGPT Reads Your Messages, and the Price Is Your Whole Disk ChatGPT reads and sends your iMessages on Mac. The ticket in is Full Disk Access, the broadest permission in macOS. Read the radar
ChatGPT can now read, summarize and send your iMessages on Mac. The ticket in is Full Disk Access, the broadest permission in macOS. You flip a setting on your end, and your whole correspondents' history goes with it, even though none of them agreed to anything.
What to watch
1. For now limited to the app's Codex and ChatGPT Work modes, on Apple Silicon Macs, but Codex is included even in the free plan.
2. The send confirmation protects the output, not the reading; the plugin reads your entire history before any approval.
3. Open System Settings, Privacy and Security, Full Disk Access, and remove any third-party AI assistant. Same round in Automation and Contacts.
SIGNAL The UN Treaty That Can Launder Spyware Evidence Canada signed the UN Cybercrime Convention. A cross-border evidence-sharing channel that, once ratified, can launder data stolen by spyware. Read the radar
On 16 July 2026, Canada signed the UN Convention against Cybercrime, the very treaty it had sworn to fight. Signature, not ratification yet: nothing is armed until 40 countries ratify. But read the fine print. Behind the "anti-cybercrime" veneer sits a machine for moving evidence between states that, once ratified, nowhere forbids laundering data stolen by spyware. They call it cooperation. It's surveillance with a new stamp on it.
What you watch, now
1. Ratification, not signature. Don't fall for the press release: the only number that arms this treaty is 40. Below it, theatre. Above it, too late.
2. The origin of evidence. The text couldn't care less whether a piece of evidence was stolen, nothing forbids passing it around. If your representatives don't lodge an explicit reservation when ratifying, they're signing a blank cheque.
3. The extraterritorial reach. Journalist, researcher, whistleblower, diaspora: the target is you, not the cybercriminals. A repressive regime on the other side of the world will be able to demand your file, and a gag order will forbid you from even knowing it was taken.
SIGNAL Apple Private Relay protects you from nothing A large share of iCloud+ subscribers take Private Relay for a tunnel. Three WebKit leaks say otherwise, and Apple is being sued for fraud. Read the radar
Private Relay is not a VPN. A large share of iCloud+ subscribers turn it on believing it hides all their traffic, it only covers Safari, and three WebKit leaks let your IP or your DNS slip out. A US law firm is suing Apple for fraud, with no fix announced by the company.
What to watch
1. Passkey, DNS prefetching and WebTransport (introduced with iOS 26) bypass the relay, on the Safari engine side.
2. These are legal allegations plus security research, not exploitation documented in the wild.
3. Apple is investigating with no timeline, no leak is plugged until it's publicly verified.
4. Install a sovereign, encrypted DNS, DNS4EU or Quad9 over DoH or DoT. It closes the DNS leak that Private Relay lets through, and the protection is worth well beyond Safari.
ANALYSIS London demands your encrypted iCloud backups Apple is challenging a British order targeting your iCloud backups. Narrowed to the UK, the precedent knows no border. Read the radar
Apple is challenging before the IPT a new British order demanding access to your encrypted iCloud backups. It is narrowed to UK users only, after the 2025 version, which also covered Americans, was withdrawn. The catch: if you can technically open one country's backups, you can do it anywhere. The precedent weighs more than the perimeter.
What it changes for you
1. Without Advanced Data Protection, your iCloud backup is encrypted but with a key Apple holds, so it is accessible to Apple and can be compelled by an order.
2. With ADP on, your backups switch to end-to-end encryption and Apple has nothing left to hand over. Check your status.
3. The option does not cover iCloud Mail, Contacts or Calendar. For encrypted email, that is Proton Mail or Tuta.
ALERT A fake Zoom update empties your iCloud Keychain A trusted Telegram contact invites you to a video call, a fake Zoom update pops up mid-call, and your iCloud Keychain gets emptied. Read the radar
A contact you know invites you to a video call on Telegram, except their account has been hijacked. During the call, a fake "Zoom SDK Update" pops up, you click to fix your mic, and a stealer siphons your browser keys out of your iCloud Keychain. BlueNoroff, North Korea, zero flaw exploited, 100% social engineering. It's the third ClickFix on macOS in six weeks.
What you need to do
1. An install prompt in the middle of a meeting, you refuse. No video call ships you an "SDK Update" mid-call.
2. A meeting link, even from a real contact, verify it through another channel. The Telegram account on the other end may be compromised.
3. An outbound firewall, Little Snitch or LuLu, sees the exfil leave for Telegram while the stealer empties your keychain.
ALERT Claude Cowork in local mode, the agent walks out of the sandbox On macOS in local mode, Claude Cowork mounts your entire disk inside the agent's VM. One connected folder, one message, and it walks out without asking. Read the radar
You connect one folder to Claude Cowork, and the agent actually has your whole disk within reach. In local execution mode on macOS, Cowork mounts the entire filesystem read-write inside the agent's virtual machine. A single message is enough to walk it out, without any permission prompt showing up. Anthropic closed the report as "informative", with no fix: the shift to cloud execution does mitigate the risk, but it is a gradual beta, and local mode stays exposed.
What you need to do
1. Check your Cowork execution mode. Cloud has become the default, but in beta and in waves: go read it in your settings instead of assuming it. Local mode leaves you exposed.
2. Never run a local session from a macOS account that holds your Keychain, your SSH keys or your password manager file.
3. Treat everything the agent reads, web page, attachment, ticket, as hostile code. That is the entry point of the chain.
SIGNAL Hugging Face compromised, and your local model? Hugging Face announced on July 16th that they had been compromised. Public models were unaffected, and the attacker was an OpenAI AI in testing. Read the radar
The model hub where LM Studio fetches your models has been breached, Hugging Face announced on July 16th. The company left internal infrastructure credentials, not yours, and no public model tampering has been reported. The twist? No hacker involved. OpenAI claims it was their own models, escaped from an internal test.
What to watch out for
1. If you don't have a Hugging Face account, you've got nothing to worry about. Your downloads are untouched.
2. If you do have an account, rotate your access tokens and review recent activity, as a precaution.
3. Hugging Face is still assessing if partner or client data has been affected.
ALERT Apple-notarized malware slips past Gatekeeper CrashStealer, signed and notarized by Apple, clears Gatekeeper without a single alert. Notarization validates the signature, not the intent. Read the radar
CrashStealer, a macOS infostealer disguised as an Apple crash-reporting tool, clears Gatekeeper without the slightest alert. It's signed by a valid Developer ID and notarized by Apple. Your Mac trusts the signature, not the intent behind it. Apple revoked the certificate after the fact, once the damage was done.
What you should do
1. Any app or DMG from outside the App Store received by invitation or direct link, the Apple signature doesn't redeem the provenance.
2. A prompt asking for your login password "to continue" with no legitimate install underway is a red flag.
3. Unexpected outbound connections, an application firewall like Little Snitch or LuLu sees them go out.
SIGNAL Chat Control 1.0, adopted by those who voted no On July 9th, the European Parliament allowed Chat Control 1.0 to be renewed, falling short of the 361 votes needed to block it, despite a majority voting against. What this means, and what's heading back to trilogue in September. Read the radar
On July 9th, 2026, the European Parliament let Chat Control 1.0 (voluntary CSAM scanning, EU Regulation 2021/1232) slip through. Not by a vote for, but with 314 against, 276 for, yet blocking the Council’s position needed 361 votes. The majority voted no, but the text passed anyway. End-to-end encryption is explicitly excluded from this text. The real fight, Chat Control 2.0 (CSAR), resumes in September.
What you need to watch out for
1. CSAR (Chat Control 2.0), potential mandatory client-side scanning on end-to-end, which resumes trilogue in September 2026. That’s the only date that matters.
2. The method: a text rejected by the majority of voters that passes due to lack of an absolute majority to block it. Remember the mechanism, it’ll come back.
3. Viral posts claiming WhatsApp and Signal are now being scanned. That’s false for 1.0, end-to-end is excluded. Don’t spread the panic.
ANALYSIS Wazuh 5.0 lands, your home SIEM evolves Wazuh 5.0 in public beta, releasing late June/early July. Filebeat dit au revoir, clusters enabled by default, new engine. Your 4.x install will upgrade. Don't worry, we'll explain it all. Read the radar
Wazuh 5.0 lands in public beta, revamps its architecture, Filebeat’s gone, clustering enabled by default, new engine. If you’ve set up your SIEM with our series, your 4.x install is still running, the upgrade to 5.0 won’t be blind.
What changes for you
1. Check your version with wazuh-control info, recent 4.11 and later still receive updates.
2. Snapshot your VM and backup /var/ossec/etc/ before attempting the 5.0 upgrade.
3. Wait for a stable 5.0.x release (5.0.1 or 5.0.2) before migrating, we’ll update the SIEM series then, migration guide included.
SIGNAL Chat Control, the EU is gambling with your encryption June 29th saw the EU’s 5th and final trilogue on Chat Control 2.0 (CSAR). At stake: mass scanning of your private messages before encryption, versus a Parliament defending end-to-end. The outcome’s now, deciding if… Read the radar
June 29th saw the EU’s 5th and final trilogue on Chat Control 2.0 (CSAR). At stake: mass scanning of your private messages before encryption, versus a Parliament defending end-to-end. The outcome’s now, deciding if WhatsApp, Signal, and iMessage stay truly encrypted in Europe.
What to watch:
1. The publication of the trilogue’s outcome (or failure) and whether there’s an explicit exemption for end-to-end encryption.
2. The return of « Chat Control 1.0 » (extended voluntary scanning) that Metsola threatens to reopen if 2.0 stalls: a Trojan horse if negotiations fail.
3. Mandatory age verification, which kills online anonymity far beyond fighting CSAM.
SIGNAL Your location leaks via the network, not your iPhone Tech companies track any mobile device through telecom interconnection flaws. No iPhone patches needed. Read the radar
Citizen Lab linked, in its “Bad Connection” report from April 2026, real surveillance traffic to operators’ infrastructures. Commercial entities can locate any mobile device through network interconnection flaws, SS7 in 2G/3G, Diameter in 4G, without ever touching the device. Nothing to patch on your iPhone: the hole is in the network, not in iOS.
What you need to watch out for
1. No setting blocks this vector: neither Isolation mode, nor eSIM, nor Signal, nor turning off data. The only workaround is to make yourself unreachable by turning on airplane mode or turning off your phone. Don’t think you’re covered just because you’re encrypting your messages.
2. Use 2FA codes for apps, not SMS. It doesn’t stop geolocation, but it closes the interception of codes via the same network.
3. The real defense is structural, on the operators’ and regulators’ side. NIS2 and ENISA frame the risk, but no strong technical obligation yet requires securing interconnection.
ANALYSIS Siri AI blocked in EU, privacy signed Google Apple Unveils Siri AI at WWDC, But Locks It Down on iPhone and iPad in EU. A Confidential Platform Built on Google Gemini. Here's the Breakdown. Read the radar
Apple Launches Siri AI at WWDC, But Blocks It on iPhone and iPad in EU Due to DMA. Commission Says It’s Apple’s Choice, Not a Requirement. To Top It Off, This “Confidential” Platform Partially Relies on Google Gemini.
What This Means for You
1. No Siri AI on iPhone or iPad in Europe. But without cloud AI assistant, your device is safer: you lose a feature, not a protection.
2. For the Sensitive, Stay Local and enable Advanced Data Protection on iCloud. For encrypted email, use Proton Mail, not iCloud Mail.
3. Ask Yourself the Real Question: Is trusting your most intimate assistant to an Apple-Google chain a technical guarantee or a contractual promise?
ALERT OpenAI Certificate Compromised, Update ChatGPT Mac Before June 12th ChatGPT, Codex, and Atlas on Mac: Mandatory update before June 12, 2026. OpenAI cert revoked after npm supply-chain attack. Read the radar
If you’re using ChatGPT, Codex, or Atlas natively on your Mac, you’ve got until June 12, 2026 to update. OpenAI’s signature certificate has been compromised via a supply-chain attack on npm. After that, your app won’t start.
Here’s what you need to do:
1. Open ChatGPT.app, go to Settings → About. Update if your version is ≤ 1.2026.125. Same for Codex App (≤ 26.506.31421), Codex CLI (≤ 0.130.0), Atlas (≤ 1.2026.119.1).
2. Official download only, chatgpt.com/download or App Store. No mirrors, no shared links.
3. iOS, Windows, Android, nothing to do, OpenAI re-signs on the server side. Mac only.
ALERT Domestic stalkerware, the jealous partner's malware Stalkerware Spyzie, Cocospy, Spyic, over 3 million victims combined. Your iPhone drained via your Apple ID. How to check and take back control. Read the radar
Public stalkerware (Spyzie, Cocospy, Spyic, mSpy) has over three million victims just within the Cocospy/Spyic/Spyzie family. Thirty to seventy dollars a month, operated by Chinese operators. On iPhone, your spouse knows your Apple ID and drains iCloud from the web. Less commonly, a hidden MDM profile installed by a close one in just two minutes. On Android, a hidden app. Premium modules: real-time GPS tracking and remote microphone activation. The victim never searches for the term “stalkerware” and doesn’t even know it exists.
What you need to do
1. Check Settings, General, VPN and Device Management. Any profile you didn’t set yourself, especially vague ones like “iOS Update”, delete it. Check Screen Time, disable any password you didn’t set.
2. Change your Apple ID password, enable two-factor authentication, remove unknown devices from your list, and enable Advanced Data Protection to switch your iCloud backups to end-to-end encryption.
3. Switch to Signal for sensitive messages, Bitwarden or KeePassXC for passwords, never a shared vault.
4. If you suspect active installation, act from another device and network. The Coalition Against Stalkerware lists resources by country.
ALERT The U.S. cyber regulator let its AWS keys slip six months ago. A US federal cyber agency's subcontractor left their AWS GovCloud admin keys on a public GitHub repo for six months. Why not delegate your security, huh? Read the radar
CISA, the U.S. federal cyber agency, just found out that one of its subcontractors left a public GitHub repository full of AWS GovCloud admin keys, tokens, and cleartext passwords for six months. External detection by GitGuardian, not internal. The keys remained valid for 48 hours after the repo was removed. If the federal cyber regulator can’t even keep its own secrets, how are you supposed to? Let me explain!
What you need to do
1. Inventory what you’re currently entrusting to a third-party cloud, and for each item ask yourself who has the decryption key. At-rest encryption with server-side keys equals zero.
2. Choose your cloud providers based on one criterion: end-to-end encryption, client-side keys (Proton, Tuta, Mullvad for EU).
3. What happens at home stays at home: backups on encrypted APFS external disk, double offsite encrypted copy.
ALERT Five years of defending memory M5 down in five days Three California researchers bypassed Memory Integrity Enforcement M5 in five days using Mythos. First public kernel exploit on Apple M5 silicon. Patched in macOS Tahoe 26.5. Read the radar
Three researchers took full control of a Mac M5 in five days, with a helping hand from Mythos, Anthropic’s specialized IA vulnerability AI. In the process, they took down MIE, Apple’s five-year-old memory protection. Apple patched it in macOS Tahoe 26.5 on May 11. First public kernel exploit on M5 silicon, and a real-world show that AI can speed this kind of work by a factor of ten.
What you need to do
1. Update macOS Tahoe 26.5 immediately (System Preferences, Software Update).
2. Enable Lockdown Mode if you’re professionally exposed (journalist, activist, executive).
3. Avoid all unverified user binaries. Strict Gatekeeper, signatures on Homebrew.
ALERT Google Ads and real cat Claude share your credentials Google sponsored ads redirect to real, shared claude.ai links that are baited. Fake Apple Support makes you paste a base64 into Terminal. MacSync payload empties your Keychain. Read the radar
A malicious ad campaign is hijacking Google Ads and Claude.ai’s Share function to promote MacSync, an info-stealing macOS malware that empties your Keychain with a simple terminal command you paste yourself. The pattern combines two trust signals (official claude.ai domain + fake Apple Support) to lure you into running base64 without suspicion.
What you need to do
1. Never paste a terminal command dictated by a website, AI chat, or an “official” PDF.
2. Enable Little Snitch or LuLu and monitor unexpected network traffic.
3. If already executed: disconnect from Wi-Fi, change all your browser passwords, and scan with KnockKnock.
ALERT Patch iOS and macOS, then tune your Safari profiles iOS 26.5 fixes 98 CVEs, including 21 in WebKit; macOS Tahoe 26.5 fixes 98 CVEs, including 22. Instead of enabling Lockdown Mode everywhere, segment with a dedicated Safari profile. Read the radar
iOS 26.5 and macOS Tahoe 26.5, released on May 11, fix 98 CVEs each (including 21 and 22 in WebKit). Global Lockdown Mode is overkill for daily use. Safari profiles, available since iOS 17, segment usage for you.
What you need to watch out for
1. Install iOS 26.5 and macOS Tahoe 26.5 today.
2. Create a “Cautious” Safari profile with only privacy extensions enabled, use it for banking, webmail, suspicious links, and medical research. Keep your default profile untouched for everything else.
SIGNAL Proton Mail switches to post-quantum encryption (and it's free) Proton Mail offers a quantum-resistant encryption option, available on all plans including the free one. Must be enabled manually, but don't get your hopes up. Read the radar
Proton Mail now offers an encryption option that’s quantum-resistant. Available on all plans, even the free one. You’ll need to turn it on yourself, and it only works for new emails.
What you need to watch out for
1. Enable the option in Settings, Encryption and keys, but don’t think it’ll protect your old emails, it only works for new ones.
2. The benefit is maxed out when the person you’re sending to is also on Proton. If they’re on Gmail or elsewhere, it’s back to classic encryption for that send.
3. End-to-end encrypted forwarding is temporarily incompatible. If you’re using it, pick one or the other until it’s fixed.
SIGNAL iOS 26.5 finally encrypts RCS iPhone-Android (but Signal still leads) Apple enables end-to-end encryption on RCS messages with iOS 26.5, using the MLS protocol. The end of cross-platform clear-text SMS, but Signal remains the gold standard for sovereignty. Read the radar
Apple Enables End-to-End Encryption on RCS Messages with iOS 26.5
Your iPhone-Android chats won’t be passing through clear SMS anymore. A real step forward, but RCS protocol still falls short of Signal for sensitive conversations.
What You Need to Watch Out For
1. Enable Advanced Data Protection on iCloud to encrypt your backups end-to-end as well.
2. Keep Signal for sensitive stuff: it’s the only one where your keys never leave your device and metadata doesn’t leak to operators or Google.
3. Make sure your Android contacts support RCS, or you’ll be back to clear SMS.
SIGNAL Trellix, Europol's partner, gets its source code stolen Trellix, a cybersecurity partner of Europol, announced on 02/05 an unauthorized access to a portion of its source code. No evidence of exploitation, according to the vendor, but this statement needs verification. Read the radar
Trellix, a cybersecurity partner of Europol, announced on 02/05 an unauthorized access to a portion of its source code. No evidence of exploitation, according to the vendor, but this statement needs verification.
What you should watch out for
1. The exact perimeter of the intrusion (affected products, duration, attribution), which Trellix has not yet communicated as of 03/05.
2. Any official communication from Trellix in the coming weeks, or the possible appearance of the code in plain sight on a forum.
3. If you have Trellix on your network, ask your reseller in writing for the list of affected products and schedule a configuration review; if you have another EDR, don’t switch vendors on a whim.
ANALYSIS The ransomware negotiator worked for the gang An American ransomware negotiator pleaded guilty to secretly working for the gangs he was supposed to fight. This case highlights a structural issue: the entire post-incident ecosystem (negotiators, insurers… Read the radar
An American ransomware negotiator pleaded guilty to secretly working for the gangs he was supposed to fight. This case highlights a structural issue: the entire post-incident ecosystem (negotiators, insurers, consultants) has an interest in you paying.
What this means for you
1. Your client-side encrypted backups (Kopia, zero-knowledge) and tested remain your only reliable guarantee, third-parties can be compromised.
2. Segment your network so ransomware can’t reach your backups. Tailscale mesh.
3. Document your response procedure BEFORE the incident, without relying on intermediaries.
ALERT Anthropic's MCP, 200,000 instances exposed to RCE OX Security published on April 15, 2026 a architectural vulnerability in Anthropic’s Model Context Protocol (MCP): the STDIO interface of the official SDKs allows for the execution of arbitrary OS commands from the… Read the radar
OX Security published on April 15, 2026 a architectural vulnerability in Anthropic’s Model Context Protocol (MCP): the STDIO interface of the official SDKs allows for the execution of arbitrary OS commands from the configuration. 7,000+ public servers, 150M+ downloads, and approximately 200,000 instances are exposed. On the Mac side: Cursor, Windsurf, and Claude Desktop are concretely affected via their MCP integrations. Anthropic refuses to patch: “by design”.
What you need to do
1. If you’re using Cursor, Windsurf, or Claude Desktop with installed MCP servers: audit the list of connected MCPs, disable ones you haven’t explicitly verified, and never load a MCP configuration from a third party (gist, forked GitHub repo, Slack share) without reading it entirely.
2. Update to the patched versions of the affected tools (LiteLLM, LangFlow, Windsurf, Flowise, DocsGPT, GPT Researcher, Bisheng, Agent Zero), at least 10 CVEs issued (CVE-2026-30615 Windsurf via malicious HTML, CVE-2026-30623 LiteLLM, CVE-2025-65720 GPT Researcher, etc.). Also update Cursor and Claude Desktop, which use the MCP SDKs without their own CVE.
3. If you’re hosting an exposed MCP server in a network: block public access, place it in a sandbox with restricted permissions, monitor invocations.
4. Consider all external MCP configs as untrusted by default: Anthropic considers sandboxing the responsibility of the developer, not the protocol.
ALERT Mythos, the model that finds bugs on its own, just leaked Anthropic keeps a model, Mythos, under lock and key, capable of finding zero-day flaws on its own across iOS, macOS, Windows, and browsers. An unauthorized group, including an Anthropic subcontractor employee, gained… Read the radar
Anthropic keeps a model, Mythos, under lock and key, capable of finding zero-day flaws on its own across iOS, macOS, Windows, and browsers. An unauthorized group, including an Anthropic subcontractor employee, gained access to it after the program’s announcement, via a guessed URL.
What you need to do
1. Install pending updates on your Mac and iPhone, and enable automatic updates.
2. Filter unknown senders in iMessage and block unknown callers on your iPhone.
3. Be wary of links and attachments, permanently.
SIGNAL GPT-5.5 rated high cyber capability, OpenAI tightens access OpenAI officially classifies GPT-5.5 as “High” cybersecurity capability. The model can run multi-day vulnerability research campaigns, produce basic exploit memory blocks on hardened systems, and saturate professional… Read the radar
OpenAI officially classifies GPT-5.5 as “High” cybersecurity capability. The model can run multi-day vulnerability research campaigns, produce basic exploit memory blocks on hardened systems, and saturate professional hacking competitions. OpenAI has tightened its input filters and restricted access to modes where AI can chain multiple vulnerabilities on its own.
What you need to watch out for
1. Keep your Mac and iPhone strictly up-to-date. The window between bug publication and AI-assisted exploitation is closing.
2. Reduce your browser attack surface (Safari, minimum extensions, no Chrome on the main Mac).
3. On exposed devices (frame, journalist, activist), enable Lockdown Mode, not just for GPT-5.5, but for the class of tools it represents.
4. Keep an eye on the next two major system cards (OpenAI, Anthropic). That’s where we’ll see if the Critical cybersecurity bar drops in 2026.
ALERT A consumer-grade AI cooked up a Chrome exploit for $2,283. A researcher asked Claude Opus 4.6, the same model accessible to anyone for a monthly subscription, to create code to exploit a fixed Chrome bug. Result: Discord opens your Mac’s calculator without your permission… Read the radar
A researcher asked Claude Opus 4.6, the same model accessible to anyone for a monthly subscription, to create code to exploit a fixed Chrome bug. Result: Discord opens your Mac’s calculator without your permission. Researchers’ security convention: if calc opens without asking, anything can open. Discord, Slack, Teams, Notion all run on Chrome under the hood and patch late. Operation cost: $2,283.
What you need to do
1. Update Chrome, Safari, Firefox, Edge on your Mac tonight.
2. Open Discord, Slack, Teams and check they’re running the latest version.
3. Uninstall any abandoned app (no update in over 6 months).
SIGNAL Age verification EU, hacked in 2 minutes, poorly coded surveillance Paul Moore skirts the EU's age-verification app in under 2 minutes. The EUDI standard promised zero-knowledge. Its implementation stores the PIN in an editable XML. Read the radar
The EU’s Age Verification App, launched on April 14th, was bypassed in under two minutes. Editable config, boolean for biometry, PIN not linked to identity vault. The EUDI Wallet standard had zero-knowledge (SD-JWT VC, IRMA/Yivi, AnonCreds) in mind. Yet, the implementation ignored it.
The Real Scandal
The EU wrote the right standard. The reference app betrayed it.
Keep an Eye On, same EUDI architecture set to be used tomorrow for IDs, prescriptions, taxes, 450 million Europeans.
SIGNAL The FBI got their hands on deleted Signal messages. Cheers, iPhone notifications. The FBI reassembled deleted Signal messages via iPhone push notification metadata. End-to-end encryption didn't make a difference. Read the radar
The FBI rebuilt deleted Signal messages via iPhone push notifications. Apple keeps these metadata and hands them over on demand. End-to-end encryption in Signal doesn’t matter because the leak happens elsewhere.
What you need to do
1. Signal: Settings → Notifications → “No Name or Content”, the app won’t inject anything into the push payload anymore.
2. iOS: Settings → Notifications → Previews → Never, you cut content for all apps at once.
3. Check other messaging apps (Messages, WhatsApp), apply the same settings.
ALERT "No Access", and the app still reads your files macOS secretly logs access to your files whenever you use the Open/Save dialog. The Privacy & Security interface doesn't show this. Since 2019. Read the radar
macOS keeps a permanent access to your files when an app uses the native Open/Save dialog. This access is separate from the Privacy & Security settings. You revoke the app’s access in the settings, it disappears from the list, but it still reads your files. Since 2019.
What you need to do
1. Check which apps have accessed your protected folders via Terminal: xattr -l ~/Desktop | grep com.apple.macl
2. To revoke ghost access: copy the file to another volume, delete the original, then copy it back, the attribute doesn’t follow.
3. Review your Mac’s privacy settings with our dedicated guide, keeping in mind that these settings don’t cover this mechanism.
ALERT 108 Chrome extensions trapped, your Google and Telegram too 108 malicious Chrome extensions identified in the Chrome Web Store by Socket researchers. Google OAuth theft, backdoors, Telegram exfiltration. Google notified, extensions still online at publication. If you're using Chrome on Mac, you're affected. Read the radar
108 malicious extensions identified in the Chrome Web Store, with around 20,000 cumulative installations. They steal Google and Telegram tokens and install backdoors. Google was notified but the extensions were still online at the time of the report. If you’ve installed a Chrome extension recently, the damage may already be done.
What you need to watch out for
1. Audit your Chrome extensions and uninstall anything you don’t use regularly.
2. Log out of active Google sessions from myaccount.google.com, under Security.
3. Revoke Telegram sessions from Settings, Devices, on any client.
4. Seriously consider using Safari as your default browser on Mac.
Source: 108 Chrome Extensions Linked to Data Exfiltration (Socket, 2026-04)
SIGNAL Google hands over your data to ICE, without telling you On a simple administrative subpoena from ICE, Google handed over a journalist's data without prior notice, breaking a decade-old promise. Read the radar
Google Promised to Warn You Before Handing Your Data to Authorities. It Didn’t. On a simple administrative subpoena from ICE, without a warrant or a judge, it handed over a student journalist’s info. Notification came later. The file was already gone.
What You Need to Watch Out For
1. Any Google account linked to your real identity is vulnerable to government requests without a warrant or prior notice
2. An administrative subpoena is enough: no judge, no chance to challenge before disclosure
3. Switching to Proton Mail gets you out of this equation, complete guide here
Sources: EFF Deeplinks · The Intercept
ALERT ANSSI flags Claude Cowork and OpenClaw on Mac ANSSI issues official warning about autonomous AI agents on workstations. Cowork Claude and OpenClaw named. Here's what you need to do. Read the radar
ANSSI has just published an official alert about autonomous AI agents: OpenClaw and Claude Cowork are named, along with other open-source solutions. These tools run commands, read your files, send emails, and a malicious webpage could manipulate them without your knowledge. In other words: AI assistants on your Mac are also attack surfaces.
What you need to do
1. Disable access to sensitive apps (email, calendar, work files) for your AI agents in their respective settings.
2. Don’t use Claude Cowork, OpenClaw, or any autonomous agent on a machine containing client or financial data without proper supervision.
3. Check which applications each AI agent installed on your Mac has access to.
4. I’m preparing a complete guide to reduce risks: automatic filters, access segmentation, what you can disable without losing the tool’s usefulness: Coming soon in a tutorial
ANALYSIS AI Act, the EU guards the essentials, delays the rest The European Parliament amended the AI Act on March 26, 2026: rules constraining companies deploying high-risk systems are pushed back by 16 months. On the surface, it looks like a step back. In practice, what directly… Read the radar
The European Parliament amended the AI Act on March 26, 2026: rules constraining companies deploying high-risk systems are pushed back by 16 months. On the surface, it looks like a step back. In practice, what directly concerns you as a user is sped up or already in effect.
What changes for you
1. Starting November 2026, you’ll see “generated by AI” labels on images, videos, and audios produced by AI systems: watermarking becomes mandatory.
2. The ban on “nudifiers” (AI generating non-consensual sexual deepfakes) is effective immediately. It’s the most concrete rule in the text.
3. The delay in high-risk rules targets companies deploying AI in HR, justice, or education, not you directly. Your daily Mac user life doesn’t change until 2027.
ANALYSIS Your location sold in real-time for 3 years without you knowing. Citizen Lab has documented Webloc, a mass surveillance tool that exploits mobile advertising data to continuously geolocate 500 million devices worldwide, with a 3-year history, without any judicial warrant. Its clients… Read the radar
Citizen Lab has documented Webloc, a mass surveillance tool that exploits mobile advertising data to continuously geolocate 500 million devices worldwide, with a 3-year history, without any judicial warrant. Its clients include ICE, the US military, police forces, and intelligence services. The source? The public advertising network that all your apps swim in.
What this means for you
1. Anti-Tracking Transparency isn’t enough: apps that legitimately need your location (weather, navigation, fitness) still feed the real-time ad market.
2. Your movements from the past 3 years could potentially be in a database accessible to government agencies without a warrant.
3. The most effective lever: turn off location for all apps that don’t absolutely need it, and check each one individually.
ANALYSIS Chat Control 2.0, the EU wants to scan your messages Under the guise of protecting children, the EU is rushing to set up mass surveillance infrastructure for all encrypted messaging platforms. Read the radar
The European Union is moving towards a law that would force encrypted messaging apps to scan all your private messages. The mechanism: a spy on your device that reads every message before it’s sent. The trilogue is speeding up, with adoption targeted for July 2026.
What this means for you
1. Signal, iMessage, WhatsApp, Proton Mail, all encrypted messaging apps would be forced to install a backdoor
2. Signal and Proton have stated they would leave the European market rather than comply
3. Next trilogue: May 4, 2026, public pressure is changing votes
ALERT APT28 steals your Microsoft tokens without touching your Mac Russian military intelligence is exploiting unpatched routers to silently intercept your Office OAuth tokens. What you need to do. Read the radar
APT28, the GRU’s cyber branch (Russian military intelligence), has compromised over 18,000 consumer routers to intercept Microsoft Office authentication tokens. No malware on your devices. No antivirus alerts. Just your router lying to you.
What you need to do
1. Update your router’s firmware, right now
2. Set up Quad9 directly on your Mac, not on the router
3. Enable DNS-over-HTTPS if possible
4. Never ignore a TLS certificate alert
ALERT ClickFix macOS, Script Editor bypasses the Terminal warning Apple added an anti-ClickFix warning in the Terminal with macOS 26.4. Attackers promptly switched to Script Editor to distribute Atomic Stealer without friction. Read the radar
Apple added an anti-ClickFix warning in the Terminal with macOS 26.4. Attackers promptly switched to Script Editor to distribute Atomic Stealer without friction.
ALERT SparkCat is back on the App Store, scanning your gallery. SparkCat accesses your Photos gallery, scans everything with OCR, and extracts crypto seed phrases. Never store a mnemonic phrase as a screenshot. Read the radar
SparkCat accesses your Photos gallery, scans everything with OCR, and extracts crypto seed phrases. Never store a mnemonic phrase as a screenshot.
ALERT Coruna, a US toolkit in Russian cybercriminals' hands Coruna exploits 23 iOS 13 to 17.2.1 flaws, installs silently. Already in Russian criminals' hands. Activate Lockdown Mode now. Read the radar
A US government iOS toolkit has leaked. “Coruna” exploits 23 iOS 13 to 17.2.1 vulnerabilities, installs silently. It’s in the hands of Russian and Chinese cybercriminals.
What you need to do
1. Update iOS to the latest version, the 23 vulnerabilities target iOS 13 to 17.2.1
2. Enable automatic updates if not already done (Settings > General > Software Update)
3. Check that no suspicious profiles are installed (Settings > General > VPN & Device Management)
ALERT DarkSword, the iOS 18.7.7 update is mandatory The source code of DarkSword is on GitHub. Apple releases iOS 18.7.7 to fix WebKit, Kernel, and Keychain. Mandatory update. Read the radar
The source code of DarkSword is on GitHub. Apple releases iOS 18.7.7 to fix WebKit, Kernel, and Keychain. Mandatory update.
Why a Radar rather than a news feed
Because nobody needs yet another aggregator. What you want is to know what deserves your attention and what to do about it. Nothing else.
Getting the Radars
- Dedicated RSS feed: macsouverain.com/en/radars.xml, add it to NetNewsWire, Reeder, or any RSS reader.
- Full archive: macsouverain.com/en/tag/radar/
How the Radars are made
- Automated watch every morning across some fifty sources (institutional, Apple-centric, privacy, cybersec, French-language blogs, Reddit, Mastodon).
- Selective sorting: we keep only what can genuinely affect your Mac, your iPhone or your everyday digital life.
- Manual fact-check on every topic we keep: CVEs verified in the NVD, iOS/macOS versions confirmed on Apple Security Updates, multi-source mandatory.
- Writing in a direct tone, no empty jargon, sources cited inline.
- Editorial sign-off before publishing. Zero articles slapped up in a hurry.
Spot something that deserves a Radar, or an error in an article? Write to me, 
@[email protected], the Radar gets better with reader feedback.