Apple Design Eliminates Need for Webcam Covers, Avoids Damage to Screens

The Mac threat landscape review for September indicates that ClickFix has become the primary delivery method for new Mac stealers, with attackers improving persistence and backdoor techniques. This method bypasses Apple's built-in security features by coercing users into self-infection, leading to the evolution of stealers into more sophisticated threats.

Security researcher Patrick Wardle discovered a 0-day vulnerability in Meta's new Muse personal AI agent for Mac, allowing local applications to alter critical settings without special macOS permissions. This flaw enables attackers to redirect dictated prompts, steal authentication tokens, and potentially control the AI agent to perform malicious actions like writing files or accessing device cameras. The discovery undermines Meta's recent claims of Muse's robust privacy and security features.

Apple released iOS 27, which includes a new security feature called Impersonation Risk Detection. This feature allows supported apps to query the iPhone for risk assessment during sensitive actions like payments or password changes, aiming to detect ongoing scams.

A podcast episode features discussions on current macOS threats based on Moonlock's mid-2026 threat report and provides a preview of the upcoming Objective by the Sea v9 security conference. This offers insights into the evolving security landscape for Apple devices and upcoming community events.

A leak in macOS 27 Release Candidate suggests Apple is developing camera-enabled AirPods that utilize Visual Intelligence. This development follows privacy concerns surrounding Meta AI glasses and Flock cameras, indicating Apple may adopt a different approach for its integrated camera technology.

Apple has warned iPhone users that scammers are increasingly using FaceTime to impersonate banks and steal user data. This trend highlights a new method for phishing and social engineering attacks, leveraging the perceived trustworthiness of live video calls.

Apple has capped the number of open vulnerability reports a researcher can have at once, with a 30-day cool-off period after the cap is reached. This change, along with previous adjustments to its bug bounty program, appears to be a response to a growing volume of AI-generated security submissions.

Despite the touted advantages of passkeys over traditional passwords, many users still rely on the latter for authentication. The slow adoption of passkeys indicates a lingering resistance to transitioning away from established password systems, even as major companies implement passwordless defaults.

Plastic webcam covers are deemed ineffective at improving privacy and can damage MacBook displays. Apple's 2008 hardware design prevents unauthorized access to the webcam without activating the green indicator light, confirming their stance against the use of these covers.