New CrashStealer malware poses as Apple crash reporting tool

Multiple active threats and high-impact security developments reported: a macOS info-stealer named CrashStealer is masquerading as Apple’s crash reporter to exfiltrate credentials, keychain items, and crypto wallets; CISA warns of active remote code execution exploitation in Joomla extensions iCagenda and Balbooa Forms via arbitrary file upload; six U-Boot bootloader flaws were disclosed that could enable stealthy, persistent firmware attacks; RedHook Android malware now abuses Wireless ADB for shell access; researchers demonstrated a novel prompt-injection technique (‘Ghostcommit’) hiding in‑