Phil Stokes is a Research Engineer at SentinelOne, specializing in macOS threat intelligence, platform vulnerabilities and malware analysis. He began his journey into macOS security as a software developer, creating end user troubleshooting and security tools just at the time when macOS adware and commodity malware first began appearing on the platform. Phil has been closely following the development of macOS threats as well as researching Mac software and OS vulnerabilities since 2014.
Police arrest two gangs of SIM Swappers, ransomware vendors take note of COVID-19, and 5 billion data breach records are found on an unsecured repository.
AppleScript is widely used by threat actors and yet widely ignored by security researchers. Here's why we need to rethink our attitude to this unique tool.
macOS no longer offers an easy way to execute known malware, which hampers malware research and campaign tracking. Here's how we bypass those restrictions.
Mozilla beefs up Firefox security, a new Wi-fi vuln hits a billion devices, and DoppelPaymer ransomware enrols stubborn victims into public 'Hall of Shame'.
Microsoft and others go on a bug-fixing spree, Emotet worms its way into nearby Wifi networks, and the US breaks crypto to spy on allies and enemies alike.
Nintendo hacker gets taught a lesson by the FBI, IoT devices on Windows 7 hit by Lemon Duck malware and Huawei complain about "unconstitutional" FCC label.
Understanding macOS security tools is vital for researchers and defenders. With Apple's unique telemetry, they may hold the first clue to emerging threats.
Threat actors on macOS increasingly rely on shell scripts as an effective way to deliver malware installers that trick users and bypass security controls.
The cybersecurity skills shortage gets a much-needed boost, the NSA reveal a critical Windows Crypto bug, and researchers dump dangerous Citrix exploit code.
