New Mac Malware Exploits GateKeeper Bypass Bug that Apple Left Unpatched

Cybersecurity researchers from Intego are warning about possible active exploitation of an unpatched security vulnerability in Apple's macOS Gatekeeper security feature details and PoC for which were publicly disclosed late last month. Intego team last week discovered four samples of new macOS...

intego.com XSS vulnerability

Vulnerable URL: https://www.intego.com/mac-security-blog/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| No Latest check for patch:| 30.07.2017 Vulnerability type:| XSS Vulnerability status:| Publicly disclosed...

Intego FileGuard 2.0/4.0 Weak Password Encryption Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3213/info Intego FileGuard is a commercial access control utility for Mac OS versions 7-9.1. It's functionality includes the ability to enforce privileges, log activities, manage user accounts, restrict access by time, et...

New Mac malware opens secure connection for a remote hacker

A new malware threat for the Mac has been discovered that attempting to set up a secure connection for a remote hacker to connect through and grab private information. Dubbed "Pintsized" that uses a modified version of OpenSSH to potentially set up a remote connection into Mac accounts. This...

Mac OS X Trojan Goes Bitcoin Mining, Steals Files

A new Trojan targeting Mac OS X users is not only after data, but Bitcoins as well. The malware is being detected by Sophos as Miner-D, but is also known as DevilRobber. According to Sophos, the Trojan is hiding inside pirated versions of the Mac OS X image editing application GraphicConverter...

Mac OS X Trojan Goes BitCoin Mining, Steals Files

A new Trojan targeting Mac OS X users is not only after data, but Bitcoins as well. The malware is being detected by Sophos as Miner-D, but is also known as DevilRobber. According to Sophos, the Trojan is hiding inside pirated versions of the Mac OS X image editing application GraphicConverter...

Updated MacDefender Malware Appears, No Longer Needs Password

There’s a newer version of the MacDefender scareware program that’s now showing up on various Web sites, and this one no longer requires a user to enter her administrator password during the installation process in order to complete the infection routine. The first variants of MacDefender began...

CVE-2006-5916

Intego VirusBarrier X4 allows context-dependent attackers to bypass virus protection by quickly injecting many infected files into the filesystem, which prevents VirusBarrier from processing all the files...

CVE-2006-5916

CVE-2006-5916 affects Intego VirusBarrier X4. The vulnerability allows context-dependent attackers to bypass virus protection by rapidly injecting a large number of infected files into the filesystem, which prevents VirusBarrier from processing all files. The available sources confirm the product...

CVE-2006-5916

Intego VirusBarrier X4 allows context-dependent attackers to bypass virus protection by quickly injecting many infected files into the filesystem, which prevents VirusBarrier from processing all the files...

CVE-2006-5916: Undefined Security Weakness

Intego VirusBarrier X4 allows context-dependent attackers to bypass virus protection by quickly injecting many infected files into the filesystem, which prevents VirusBarrier from processing all the files...

CVE-2001-1165

Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool...

CVE-2001-1165

Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool...

CVE-2001-1165

The CVE-2001-1165 entry concerns Intego FileGuard 4.0, which stores user information and passwords with weak encryption. This weak crypto enables local users to escalate privileges by decrypting stored data, for example using the Disengage tool. The vulnerability is localized (local access requir...

CVE-2001-1165: Undefined Security Weakness

Intego FileGuard 4.0 uses weak encryption to store user information and passwords, which allows local users to gain privileges by decrypting the information, e.g., with the Disengage tool...

Intego FileGuard 2.0/4.0 - Weak Password Encryption

source: https://www.securityfocus.com/bid/3213/info Intego FileGuard is a commercial access control utility for Mac OS versions 7-9.1. It's functionality includes the ability to enforce privileges, log activities, manage user accounts, restrict access by time, etc. Intego FileGuard provides syste...