Apple has patched a zero day in WebKit that has been exploited in the wild, as well as a serious security bypass bug in macOS.
Two threat groups have been identified deploying a new variant of the IcedID malware, which often is seen in conjunction with Emotet.
A Chinese APT team has targeted telecom providers in the Middle East with a campaign that may be lined to the Operation Soft Cell actors.
A previously unknown APT is targeting Ukrainian government agencies with malware known as PowerMagic and CommonMagic.
Version 8 of libcurl has been released, patching six vulnerabilities, including an authentication bypass.