
SwiftUI introduces several new Toolbar APIs giving developers finer control over toolbar item visibility and behavior across platforms. Key additions include the visibilityPriority modifier for ToolbarContent (with automatic, low, and high options), the ToolbarOverflowMenu type for explicitly collapsing groups of items, the topBarPinnedTrailing placement to keep items pinned to the top bar trailing edge, and the toolbarMinimizeBehavior modifier to minimize navigation, tab, bottom, or window bars on scroll. These APIs help balance SwiftUI's adaptive behavior with explicit developer control across iOS, iPadOS, and macOS.
Nguồn: https://swiftwithmajid.com/2026/06/23/taking-control-of-toolbar-items-in-swiftui. 8sync News chỉ tóm tắt và dẫn link; bản quyền nội dung thuộc tác giả và nguồn gốc.
A new macOS ClickFix campaign uses fake CAPTCHA pages to trick users into running Terminal commands that silently download, mount, and execute malicious DMG files. The payload is the Atomic macOS Stealer (AMOS), which harvests browser credentials, cryptocurrency wallet data, Apple Keychain files, messaging app data, and user documents. Unlike previous DMG-based attacks requiring manual user interaction, this campaign automates the entire infection chain via hdiutil and the macOS open command. The malware targets over a dozen Chromium and Firefox-based browsers, multiple crypto wallets, and even replaces legitimate Ledger Live and Trezor Suite installations with malicious versions. All stolen data is zipped and exfiltrated to attacker-controlled servers.
SwiftNavigation 2.9.0 introduces two new Swift macros. The first, @CaseBindable, lets you derive bindings to individual enum-case payloads, enabling exhaustive switch statements over SwiftUI Binding<Enum> values to extract typed bindings for each case. The second, @UITransactionEntry, reduces boilerplate when defining custom UITransaction keys — mirroring SwiftUI's @Entry macro but for the library's platform-independent UITransaction type. Both macros are back-deployed to iOS 13.
SentinelLABS has analyzed macOS.Gaslight, a DPRK-linked Rust macOS implant with a novel anti-analysis technique: a 3.5 KB embedded prompt-injection payload containing 38 fabricated 'system' messages designed to mislead LLM-assisted triage pipelines into aborting analysis. Beyond this, the implant features a Telegram Bot API C2 with AES-GCM encryption and certificate pinning, a bot-token self-redaction mechanism, a Python-based credential stealer (harvesting browser data, keychains, and terminal history), LaunchAgent persistence masquerading as an Apple system service, and a runtime-fetched standalone CPython interpreter. The prompt injection is more sophisticated than previously documented examples, using a 38-message harness-spoofing cascade rather than a single injected block. Defenders building LLM-assisted analysis pipelines are warned to treat sample contents as adversarial input.
Point-Free is adopting SwiftPM traits across their Swift libraries to let users opt out of transitive dependencies they don't need. Using SwiftNavigation as a test bed, developers can now specify traits like CasePaths and Perception in Package.swift to avoid pulling in libraries like CustomDump, IssueReporting, and Sharing. The Dependencies library also supports traits to omit clock/Combine scheduler registrations and even Foundation/FoundationNetworking for Wasm and Android targets. Xcode provides a new UI for managing these traits. More libraries, including ComposableArchitecture 2.0, are getting the same treatment.