LINKDING

XARA—an acronym for unauthorized cross-app resource access on Mac OS X and iOS—describe a series of exploits that you need to know about.

The report

The first report I saw on the vulnerability.

Does the Indiana University XARA whitepaper make your head hurt? Here's an in-depth look at what "cross-app resource attacks" actually mean for your iOS and OS X systems.

The fact of the matter is that specialized malware can capture some of the information sent by the 1Password browser extension and 1Password mini on the Mac under certain circumstances. But roughly speaking, such malware can do no more (and actually considerably less) than what a malicious browser extension could do in your browser.

Researchers sneak password-stealing app into Apple Store to demonstrate threat.

This is great. An iOS/Mac combo app that lets you unlock your Mac using Touch ID on your iOS device. It lets you to define custom tap sequences for trackpad unlocking.