Fortinet researchers have uncovered PureLogs, an infostealer malware stealing credentials from organizations across multiple industries and geographies. Associated with the PawsRunner framework, this threat specifically targets professional service firms including medical practices, law offices, and accounting firms.

Security researchers have identified a coordinated macOS infostealer campaign leveraging Atomic macOS Stealer, ClickFix, Filegrabber, and Reaper malware to target Mac users through credential harvesting. The attack chain impersonates legitimate vendors—Apple, Microsoft, and Google—to deceive users into surrendering authentication credentials and sensitive files.

Artificial intelligence is fundamentally changing how attackers operate. Growing businesses—those with expanding IT infrastructure but limited security teams—face a critical gap: attackers now use AI to identify and exploit vulnerabilities faster than traditional security tools can detect them.

Apple released a significant security update on May 11th addressing 68 vulnerabilities across its ecosystem, including iOS, macOS, and Safari. The patch set spans CVE-2025-43524 through CVE-2026-28995, affecting core operating systems and browser functionality.

Security researchers have disclosed CVE-2026-42897, a zero-day vulnerability affecting Microsoft Exchange Server that requires no user interaction beyond opening a malicious email to trigger exploitation. This vulnerability poses significant risk to organizations in regulated industries—medical practices, law firms, and accounting firms—that rely on Exchange for business-critical communications.

Security researchers have identified EvilTokens, a threat actor group leveraging artificial intelligence to automate and personalize phishing campaigns at scale. The group deploys BlueKit, Kali365, and Tycoon2FA tools to target construction firms and financial services organizations.