Welcome to Blumira Briefings, your top headlines and trends for your security practice.

This week's episode:

- ClickFix attacks evolve techniques targeting macOS and Windows users with AI-based lures
- A targeted voice phishing attack has led to unauthorized access to about 900,000 records at identity protection firm Aura
- RondoDox attacks are becoming more focused and strategic, targeting 174 vulnerabilities up to 15,000 times a day

Have a security topic you want us to cover? Let us know in the comments!

--

Sources:
ClickFix spreads from Windows to macOS: ClickFix attacks shift tactics with ChatGPT-based lures:
https://securityaffairs.com/189542/cyber-crime/from-windows-to-macos-clickfix-attacks-shift-tactics-with-chatgpt-based-lures.html
--
Identity protection firm Aura suffers breach:
https://cyberinsider.com/identity-protection-firm-aura-suffers-data-breach-exposing-900000-records
--
RondoDox botnet expands arsenal, hits 15,000 daily exploit attempts:
https://securityaffairs.com/189569/malware/rondodox-botnet-expands-arsenal-targeting-174-flaws-and-hits-15000-daily-exploit-attempts.html