Episode 313: DragonEgg, Watering Holes, Google Passkeys, and curl

We look at DragonEgg malware for Android, which has a link to some Mac surveillanceware, and is a watering hole. Google is now requiring passkeys for personal accounts. And the curl command line tool has a serious vulnerability that Apple needs to patch.

Show Notes:

• About the security content of iOS 17.0.3 and iPadOS 17.0.3
• About the security content of iOS 16.7.1 and iPadOS 16.7.1
• curl 8.4.0 resolves a high-severity vulnerability
• Researchers Link DragonEgg Android Spyware to LightSpy iOS Surveillanceware
• Cloudflare, Google, Amazon, Microsoft explain what’s behind the largest DDoS attacks ever
• Apple bows to China, starts enforcing App Store rules
• Firefox tests a built-in checker for fake reviews
• Google will now make passkeys the default for personal accounts
• What are Passkeys, and how do they work?
• Three Individuals Convicted for Laundering Money Stolen from Scam Victims Through Gift Cards
• ‘I felt powerless’: how a crypto scam cost a finance boss £300,000

Intego Mac Premium Bundle X9 is the ultimate protection and utility suite for your Mac. Download a free trial now at intego.com, and use this link for a special discount when you're ready to buy.