A dangerously bad zero-day vulnerability in macOS was being abused by the Shlayer malware to bypass Apple’s Gatekeeper, Notarization, and File Quarantine security checks. click here to read full Article Read more on Malware...
Advanced Fuzzing Library – Slot your own fuzzers together and extend their features using Rust. LibAFL is written and maintained by Andrea Fioraldi andreafioraldi@gmail.com and Dominik Maier mail@dmnk.co. Why LibAFL? LibAFL gives you many...
In the past, Shlayer also used a two-year-old technique to escalate privileges and disable macOS’ Gatekeeper to run unsigned second-stage payloads in a campaign detected by Carbon Black. click here to read full Article...
A recently identified security vulnerability in the official Homebrew Cask repository could have been exploited by an attacker to execute arbitrary code on users’ machines that have Homebrew installed. The issue, which was reported...
Command-line tool to perform various persistence mechanism techniques on macOS. This tool was designed to be used by threat hunters for cyber threat emulation purposes. Install Do it up: $ pip3 install poisonapple –user...
A new threat identified as XcodeSpy has emerged to target macOS users. The malware spies on Mac users of Xcode IDE by delivering the EggShell backdoor. click here to read full Article Read more...
Introduction Traditionally, most malicious objects detected on the macOS platform are adware: besides the already familiar Shlayer family, the TOP 10 includes Bnodlero, Cimpli, Adload and Pirrit adware. As a rule, most tend to...
For the past few weeks, macOS Big Sur has suffered from a bug that could cause serious data loss. The bug was introduced in Big Sur 11.2, and it made its way into the...
Heads up Telegram users, especially the ones using it on macOS. The Telegram for macOS… Vulnerability In Telegram for macOS Retained Self-Destruct Messages On Devices on Latest Hacking News. Click here for image source...
Apple has rolled out a fix for a critical sudo vulnerability in macOS Big Sur, Catalina, and Mojave that could allow unauthenticated local users to gain root-level privileges on the system. “A local attacker...
Microsoft announced that Defender for Endpoint will now also help admins discover OS and software vulnerabilities affecting macOS devices on their organization’s network. Click here for image source link and to read full Article...
Disk Usage/Free Utility (Linux, BSD, macOS & Windows) Features User-friendly, colorful output Adjusts to your terminal’s width Sort the results according to your needs Groups & filters devices Can conveniently output JSON Installation Packages...
Apple has removed a controversial feature from its macOS operating system that allowed the company’s own first-party apps to bypass content filters, VPNs, and third-party firewalls. Called “ContentFilterExclusionList,” it included a list of as...
Image Source Link Since WhatsApp has updated its privacy policy, people have been in a desperate search for a secure messaging platform that can be a replacement for WhatsApp Messenger. This desperation has brought...
Jabber is Cisco’s broadly-used organization chat and instantaneous-messaging system, which it acquired in 2008. The application permits builders to embed a natively sandboxed Chromium-based web browser in their purposes. Image and Short article Supply...
Researchers backlink the OceanLotus APT group with the freshly discovered macOS backdoor variant that depends of multi-phase payloads and different up-to-date anti-detection tactics. Image and Article Resource connection Browse additional on Malware updates &...
