Apple warned hundreds of users of mercenary spyware attacks

Security Affairs reports multiple active and emerging threats, including targeted mercenary spyware notifications affecting users in 110 countries, the AmnesiaStealer macOS infostealer distributed through fake GitHub pages, large-scale Chess.com data scraping, active exploitation of critical Adobe Commerce CVE-2026-71362 and SharePoint CVE-2026-55040, CISA KEV additions affecting Cisco, Windows, and Metabase, Storm-1175’s StormEncryptor ransomware, a North Korean Lazarus campaign using a Windows zero-day, and a cyberattack disrupting CEVA Logistics operations.