Know what changed.
Trace why it matters.

Cisco Talos tracks UAT-11587, which it assesses with high confidence as China-nexus; by July 2026, the group had targeted at least 16 government and policy organizations across eight Asian countries. Antino is a Rust-compiled Windows backdoor supporting reconnaissance, shell and PowerShell execution, file transfer, in-memory shellcode loading and persistence on both 32-bit and 64-bit Windows.

Using Microsoft Graph allows Antino traffic to blend with normal Microsoft 365 activity; the implant polls its Outlook mailbox for commands every ten seconds.

Apple says it is changing macOS privacy settings to prevent third-party apps from misusing access to message histories. The announcement followed a reported incident in which Meta’s Muse sent Jason Aten a notification referencing an Apple Messages thread with a co-worker.

The article characterizes assistants with access to messages and other accounts as potentially useful but capable of causing real damage if used carelessly.

Version 3.13.4 includes a security update to google.golang.org/grpc v1.83.1 addressing HTTP/2 DATA frame fragmentation memory exhaustion (GO-2026-6348). Version 3.13.4 updates vulnerable npm dependencies in the UI.

This is a maintenance signal spanning backend and UI dependency surfaces rather than a change limited to one component.