CVE-2024-44128

CVE-2024-44128 concerns macOS security where an Automator Quick Action workflow may bypass Gatekeeper. The issue was addressed by adding an additional prompt for user consent and is fixed in macOS updates: Ventura 13.7, Sonoma 14.7, and Sequoia 15. The available connected documents indicate the v...

CVE-2024-44128

This issue was addressed by adding an additional prompt for user consent. This issue is fixed in macOS Ventura 13.7, macOS Sonoma 14.7, macOS Sequoia 15. An Automator Quick Action workflow may be able to bypass Gatekeeper...

PT-2024-30969

Name of the Vulnerable Software and Affected Versions macOS Ventura versions prior to 13.7 macOS Sonoma versions prior to 14.7 macOS Sequoia versions prior to 15 Description This issue allows an Automator Quick Action workflow to potentially bypass Gatekeeper. The problem was fixed by adding an...

About the security content of macOS Sonoma 14.7

About the security content of macOS Sonoma 14.7 This document describes the security content of macOS Sonoma 14.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases ar...

About the security content of macOS Ventura 13.7

About the security content of macOS Ventura 13.7 This document describes the security content of macOS Ventura 13.7. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases...

GHSA-C77R-FH37-X2PX vulnerabilities

Vulnerabilities for packages: policy-controller, cosign, kubescape, zarf, conftest, k8sgpt, opa, snyk-cli, spire-server, tfsec, zot, kots...

GHSA-C77R-FH37-X2PX vulnerabilities

Vulnerabilities for packages: kubescape, conftest-fips, policy-controller-fips, spire-server, conftest, k8sgpt, cosign, spire-server-fips, cosign-fips, opa, policy-controller, tfsec, snyk-cli, zarf, kots, zot...

CVE-2024-8260 vulnerabilities

Vulnerabilities for packages: kubescape, conftest-fips, policy-controller-fips, spire-server, conftest, k8sgpt, cosign, spire-server-fips, cosign-fips, opa, policy-controller, tfsec, snyk-cli, zarf, kots, zot...

CVE-2024-8260 vulnerabilities

Vulnerabilities for packages: policy-controller, cosign, kubescape, zarf, conftest, k8sgpt, opa, snyk-cli, spire-server, tfsec, zot, kots...

New macOS Malware "Cthulhu Stealer" Targets Apple Users' Data

Cybersecurity researchers have uncovered a new information stealer that's designed to target Apple macOS hosts and harvest a wide range of information, underscoring how threat actors are increasingly setting their sights on the operating system. Dubbed Cthulhu Stealer, the malware has been...

Apple's New macOS Sequoia Tightens Gatekeeper Controls to Block Unauthorized Software

Apple on Tuesday announced an update to its next-generation macOS version that makes it a little more difficult for users to override Gatekeeper protections. Gatekeeper is a crucial line of defense built into macOS designed to ensure that only trusted apps run on the operating system. When an app...

CVE-2024-27853

This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2024-27853

This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2024-27853

This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

CVE-2024-27853

CVE-2024-27853 affects macOS Sonoma up to version before 14.4 via a vulnerability in libarchive that could allow a malicious ZIP archive to bypass Gatekeeper checks. The issue is fixed in macOS Sonoma 14.4 (HT214084). No exploitation details are provided in the supplied documents; remediation is ...

Apple macOS 安全漏洞

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Sonoma prior to version 14.4, which stems from a maliciously crafted ZIP archive that could bypass Gatekeeper checks...

CVE-2024-27853: Authentication Bypass by Spoofing

This issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4. A maliciously crafted ZIP archive may bypass Gatekeeper checks...

Meta Given Deadline to Address E.U. Concerns Over 'Pay or Consent' Model

Meta has been given time till September 1, 2024, to respond to concerns raised by the European Commission over its "pay or consent" advertising model or risk-facing enforcement measures, including sanctions. The European Commission said the Consumer Protection Cooperation CPC Network has notified...

Atlassian Confluence 7.19 < 7.19.21 / 8.5.x < 8.5.8 / < 8.9.0 (CONFSERVER-94957)

The version of Atlassian Confluence Server running on the remote host is affected by a vulnerability as referenced in the CONFSERVER-94957 advisory. This High severity Gatekeeper Injection vulnerability was introduced in versions 7.1.0 of Confluence Data Center. This allows an unauthenticated...

CVE-2024-24789 vulnerabilities

Vulnerabilities for packages: buildah, kubescape, conftest, kube-oidc-proxy, prometheus-mysqld-exporter, prometheus-statsd-exporter-fips, newrelic-nri-statsd, bazelisk, conftest-fips, volume-modifier-for-k8s, ip-masq-agent, spqr, kubecolor, snyk-cli, wave-fips, policy-controller-fips,...