Last year, Apple expanded its security vulnerability to include MacOS along with the iPhone. However, according to at least one researcher, the company is not acting fast enough on some exploits.
Developer Jeff Johnson informs Apple of an exploit that allows an attacker to steal private data with a malicious Safari clone six months ago.
If a user is tricked into downloading the malicious file, the Safari clone provides unauthorized access to the MacOS. Any restricted files available in Safari are immediately available to the attacker.
Johnson explains that exploit works because Apple's Transparancy, Consent, and Control privacy protection function insufficiently checks the authenticity of a file. This means that the modified version of Safari can run without activating the aforementioned protection.
And yes, exploit works right now MacOS 11 Big Sur beta.
Johnson says Apple told him they were still investigating the problem, after initially telling him it would be fixed in the spring of 2020. Of course, people are currently flooded with an ongoing pandemic and workers around the world are working online, something justifying delays.
Hopefully the bug will be fixed once Big Sur goes public. For more on how exploit works, see Johnson's post from here.
Windows 10 - Server: Emergency security updates
Comment Policy:
IGuRu.gr does not post comments directly. Malicious comments, comments that include ads, or comments with insults are deleted without any notice. We do not adopt the views expressed by our readers.
Your comments will be displayed after approval by the administrators