New MacOS Malware Exploits Legitimate Developer ID to Pose as Apple Crash Reporter

Multi-topic security roundup: researchers at Jamf detail 'CrashStealer', a macOS backdoor signed with a legitimate Developer ID that impersonates Apple Crash Reporter to steal passwords and crypto wallets. Multiple supply-chain and data-exposure incidents reported (Lidl supplier breach, exposed AWS GovCloud keys). Phishing/MFA-bypass infrastructure exposed (open directory revealing Evilginx operators); new cloud attack techniques disclosed (OAuth Client ID spoofing in Microsoft Entra ID). Active exploitation and high-impact malware activity includes Microsoft-tracked 'GigaWiper' (espionage + w