Security Bite

9to5Mac
  • 5.0 (3)
  • Technology
  • Updated Weekly

Welcome to 9to5Mac Security Bite, your biweekly deep dive into the ever-evolving world of Apple security. I’m your host Arin Waichulis security writer at 9to5mac, and every other week, we take a bite out of the most critical stories and developments impacting the devices you use every day. Whether you’re an IT professional managing a fleet of Macs or a casual Apple user interested in what lurks around some of the world’s most secure operating systems, this show is for you. On Security Bite we’ll beyond the headlines and sit down with the industry's top security researchers and experts to break down the latest iOS/macOS features and threats so you can stay better informed.

  1. 5d ago

    Why Apple's making big changes to its bug bounty program (Part 1)

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. This episode of the Security Bite Podcast will be two parts. In this first half, I sit down with Patrick Wardle from Objective-See and Kseniia Yamburh from Moonlock Lab to discuss changes to Apple's Bug Bounty Program. In the second part coming next week, we will continue talking about what the macOS threat landscape looks like right now and the upcoming Objective by the Sea conference. The largest Apple security conference (and the only one). Links Apple caps security bug reports amid surge in AI-generated findings Apple’s baffling bug bounty changes finally make sense Follow Patrick Wardle on X and LinkedIn Check out Objective-See and upcoming #OTBS v9 conference Follow Kseniia on X Check out Moonlock’s mid-2026 macOS threat report Follow Arin on X and LinkedIn Subscribe to the show Apple Podcasts Spotify Amazon Music Pocket Casts RSS Feed

  2. Aug 7

    Why scammers love FaceTime now

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. Apple recently issued a warning to iPhone users in a support article, noting that scammers are increasingly using FaceTime to impersonate banks and steal user data. In this episode, I'm joined by Clayton LiaBraaten, Senior Executive Advisor at Truecaller, to break down how these impersonation scams actually develop, why a live video call feels so trustworthy, and what we can all do to stop them. Links ‘Screen Unknown Senders’ iOS 27 filters your Messages for spam Call screening in iOS 27 screens unknown numbers Check out Truecaller's free scam checker tool Follow Clayton LiaBraaten on LinkedIn Follow Arin on X and LinkedIn Subscribe to the show Apple Podcasts Spotify Amazon Music Pocket Casts RSS Feed

  3. Jul 28

    Data brokers are the biggest threat to privacy

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. Data brokers are quietly building detailed profiles on all of us, and this week I'm joined by Miguel Fornés of Incogni to talk about where that information comes from, who's buying it, and why this threat is getting increasingly more dangerous under AI. Show links found here. Links Incogni's free digital footprint checker AI companies and data brokers even resort to fake forms to keep selling our data Law proposed to ban AI companies from selling your health data Check out Incogni's research lab with the latest studies and surveys Follow Miguel Fornes on LinkedIn Follow Arin on X and LinkedIn Subscribe to the show Apple Podcasts Spotify Amazon Music Pocket Casts RSS Feed

  4. Jul 16

    Apple is watching your taps

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. Talal from Mysk is back on Security Bite. We get into how and why the App Store logs every tap you make, why researchers are publicly walking away from Apple's bug bounty program, and Loupe, Mysk's new free and open-source app that shows you exactly what iOS's APIs are sharing about you. Links Mysk's broken TCC bug demo Check out Loupe and Psylo browser on the App Store Follow Mysk on X Follow Arin on X and LinkedIn Subscribe to the show Apple Podcasts Spotify Amazon Music Pocket Casts RSS Feed

  5. Jun 16

    WWDC26 security and privacy rundown, BIG changes coming for users and admins

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. In this episode, I break down some of the notable new security and privacy changes Apple announced at WWDC26 last week. Siri AI was the headline reveal, but we also got a new iPhone recovery mode, small but meaningful Find My privacy changes, an agentic AI Passwords feature in iOS 27, and tighter parental controls across both operating systems. I also dig into the privacy architecture behind all the new Apple Intelligence features, and what all these changes mean for admins once you factor in managed devices and work accounts. Links Apple’s most impressive agentic AI feature yet is hiding in the Passwords app Read more in the Security Bite column Follow Arin on X and LinkedIn Subscribe to the show Apple Podcasts Spotify Overcast Pocket Casts RSS Feed

  6. May 11

    Why ClickFix is now the #1 way Macs get infected

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. In this episode of Security Bite, I sit down with macOS reverse engineer Christopher Lopez (@L0Psec) and returning guest Kseniia Yamburkh (@osint_barbie) of MacPaw's Moonlock Lab to unpack ClickFix, the social engineering technique behind nearly half of all reported breaches in 2025. We get into who's actually falling victim, why it exploded so fast, how Mac malware is evolving in 2026, the current landscape, and more. Links Notorious hacker return with notnullOSX, report from Moonlock Lab Submit a suspicious file to MacPaw for analysis Jamf's full Security 360 report covering 2025 landscape Follow Chris on X and YouTube Follow Kseniia on X Read more in the weekly Security Bite column Follow Arin on X and LinkedIn Subscribe to the show Apple Podcasts Spotify Overcast Pocket Casts RSS Feed

  7. Apr 13

    Atomic Stealer is blurring the line between infostealers and trojans on Mac

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. In this episode, I break down what I think is the most significant finding from Jamf's latest Security 360 report: trojan malware now accounting for over 50% of all Mac malware detections. This is up from roughly 17% just a year prior and beats out infostealers for the number one spot. But its not as simple as trojans are just getting popular... It basically comes down to one malware family, Atomic Stealer (shocker), which is now simultaneously sitting at the top of both the trojan and infostealer categories. That dual classification is reshaping how we should think about the Mac threat landscape, because the old lines between malware categories I think are blurring. Links Jamf's full Security 360 report Security Bite column: Trojan malware dominates Mac Read more in the Security Bite column Follow Arin on X and LinkedIn Subscribe to the show Apple Podcasts Spotify Overcast Pocket Casts RSS Feed

  8. Mar 22

    Psylo app is setting out to change private browsing

    9to5Mac Security Bite is exclusively brought to you by Mosyle, the only Apple Unified Platform. Making Apple devices work-ready and enterprise-safe is all we do. Our unique integrated approach to management and security combines state-of-the-art Apple-specific security solutions for fully automated Hardening & Compliance, Next Generation EDR, AI-powered Zero Trust, and exclusive Privilege Management with the most powerful and modern Apple MDM on the market. The result is a totally automated Apple Unified Platform currently trusted by over 45,000 organizations to make millions of Apple devices work-ready with no effort and at an affordable cost. Request your EXTENDED TRIAL today and understand why Mosyle is everything you need to work with Apple. In this episode, I sit down with Talal, one-half of the duo behind the Mysk security research X account and co-founder of Psylo, a privacy-focused iOS browser app that takes a fundamentally different approach to private browsing. We get into why not all VPNs are created equal, how exactly websites are identifying you and tracking your moments across tabs, and how Psylo tackles all of this by giving every tab its own isolated silo, complete with a separate IP address, memory, storage, and more. If you care about browser privacy on your iPhone, this one's worth a listen. Here's my conversation with Talal. Links Follow Psylo on X Follow Mysk on X, Bluesky, Mastodon Follow Talal on X Follow Arin on X and LinkedIn Get 33% off a 1 year subscription to Psylo with offer code SECURITYBITE Subscribe to the show Apple Podcasts Spotify Overcast Pocket Casts RSS Feed

See All (13)

5
out of 5
3 Ratings

About

Welcome to 9to5Mac Security Bite, your biweekly deep dive into the ever-evolving world of Apple security. I’m your host Arin Waichulis security writer at 9to5mac, and every other week, we take a bite out of the most critical stories and developments impacting the devices you use every day. Whether you’re an IT professional managing a fleet of Macs or a casual Apple user interested in what lurks around some of the world’s most secure operating systems, this show is for you. On Security Bite we’ll beyond the headlines and sit down with the industry's top security researchers and experts to break down the latest iOS/macOS features and threats so you can stay better informed.

Information

  • Creator
    9to5Mac
  • Years Active
    2026
  • Episodes
    13
  • Rating
    Clean
  • Copyright
    © 925, LLC
  • Show Website
    Security Bite

You Might Also Like