OS X and iOS users, there’s a security flaw in both systems…”while the malware cannot directly access existing Keychain entries, it can do so indirectly by forcing users to login manually and then capturing those credentials in a newly-created entry.”