News

Positive Technologies specialist discovered a critical bug in Apple Shortcuts

Red Dog Security

22 Jun 2025 — 1 min read

Positive Technologies expert Egor Filatov discovered a critical vulnerability in the Shortcuts app. If successfully exploited, the flaw could allow an attacker to gain full control over the device, including the ability to read, modify, and delete any information.

Shortcuts was first introduced in macOS Monterey in 2021 and has since been included in Ventura, Sonoma, and Sequoia. The app allows users to create quick commands for the computer to perform functions such as starting a timer, playing music, or converting text to audio.

Additionally, users have access to pre-made command macros, which attackers could exploit by uploading malicious templates to the library. For an attacker to take advantage of this security flaw, the victim would only need to carelessly run a malicious macro created by the attacker on their device.

"If successfully exploited, this vulnerability in the Shortcuts app could hypothetically allow an attacker to target any inattentive user. Before the patch, the flaw enabled an attacker to bypass macOS security mechanisms and execute arbitrary code on the victim’s operating system," explained Egor Filatov, Junior Specialist in Mobile Application Security Research at Positive Technologies.

The vulnerability was found in Shortcuts 7.0 (2607.1.3), assigned the identifier BDU:2025-02497, and rated 9.8 out of 10 on the CVSS 3.0 scale. Apple has since fixed the bug and released a corresponding update.

Users are now advised to install macOS Sequoia 15.5 or later. If updating the OS is not possible, experts recommend carefully checking downloaded shortcuts before running them or avoiding their use altogether.

352 Android Apps Infected with IconAds Adware

Security researchers at Human Security have uncovered a massive ad fraud operation dubbed IconAds, involving 352 malicious Android apps previously available on the Google Play Store. At its peak, the campaign generated over 1.2 billion ad requests per day, primarily targeting users in Brazil, Mexico, and the United States.

AI Chatbots Like ChatGPT Are Providing Fake URLs for Major Companies

Cybersecurity analysts at Netcraft have uncovered a troubling trend: AI chatbots frequently generate incorrect or misleading URLs when asked to provide official website links for major brands. According to researchers, this flaw opens a dangerous new vector for phishing and domain hijacking attacks. Key Findings from Netcraft’s Study The

Hackers Leak Allegedly Stolen Telefónica Data

A hacker is threatening to release 106 GB of data allegedly stolen from Spanish telecommunications giant Telefónica, though the company firmly denies any recent breach or data compromise. The threat actor, operating under the alias “Rey,” claims the intrusion occurred on May 30, during which over 12 hours of data

.es Domains Become 19 Times More Popular Among Phishers

Cybersecurity researchers at Cofense report a dramatic rise in phishing campaigns leveraging .es domains, which are officially reserved for Spanish-language websites or entities based in Spain. The use of these domains by cybercriminals has surged 19-fold since the beginning of 2025, making .es the third most exploited top-level domain (TLD)

Read more

352 Android Apps Infected with IconAds Adware

AI Chatbots Like ChatGPT Are Providing Fake URLs for Major Companies

Hackers Leak Allegedly Stolen Telefónica Data

.es Domains Become 19 Times More Popular Among Phishers