GhostToken GCP flaw let attackers backdoor Google accounts

Google has addressed a Cloud Platform (GCP) security vulnerability impacting all users and allowing attackers to backdoor their accounts using malicious OAuth applications installed from the Google Marketplace or third-party providers. — Read on

Three Unreleased Mac Models Appear in Apple’s Find My Configuration File

Three new Mac model identifiers were recently added to a Find My configuration file on Apple's backend, as discovered by Nicolás Álvarez (via... — Read on

Polestar 4 Has No Rear Window to Make It Safer, Says Polestar

The new Polestar 4 has no rear window to increase headroom for passengers, among other reasons; it uses a rear-mounted camera instead. — Read on

Global Spyware Attacks Spotted Against Both New & Old iPhones

Campaigns that wielded NSO Group's Pegasus against high-risk users over a six-month period demonstrate the growing sophistication and relentless nature of spyware actors. — Read on