Stay updated with breaking news from Application Notarization. Get real-time updates on events, politics, business, and more. Visit us for reliable news and exclusive interviews.
As more macOS patches emerge and cybercriminals and nation-states take aim at the platform, experts discuss how macOS security has evolved and how businesses can protect employees.
minute read Share this article: A variant of Mac No. 1 threat Shlayer since January already has been exploiting the vulnerability, which allows payloads to go unchecked through key OS security features. Apple patched a zero-day vulnerability in its MacOS that can bypass critical anti-malware capabilities and which a variant of the notorious Mac threat Shlayer adware dropper already has been exploiting for several months. Security researcher Cedric Owens first discovered the vulnerability, tracked as CVE-2021–30657 and patched in macOS 11.3, an update dropped by Apple on Monda...
...when run, it simply pops Calculator.app. Outline This is our 100th blog post …and it’s a doozy! But first, go update your macOS systems to 11.3, as it contains a patch for a massive bug that affects all recent versions of macOS…a bug that is the topic of this blog post. This bug trivially bypasses many core Apple security mechanisms, leaving Mac users at grave risk: opened → owned already exploiting it in the wild as an 0day. Yikes! Apple patched the bug as CVE-2021-30657, noting "a malicious application may bypass Gatekeeper checks" The security researcher Cedric Owens uncovered t...