Unspecified Vulnerability in Multiple Objective-See KnockKnock Products

Objective-See KnockKnock is a tool for finding and analyzing malware.TaskExplorer is a tool for viewing processes on your system. A security vulnerability exists in several Objective-See KnockKnock products. The vulnerability can be exploited by an attacker with a maliciously crafted...

Yelp OSXCollector Code Execution Vulnerability

Yelp OSXCollector is a malware analysis toolkit for OSX. A security vulnerability exists in Yelp OSXCollector. The vulnerability can be exploited by maliciously crafted multi-architecture programs Universal/fat binary to bypass third-party code signature detection and execute unsigned malicious...

Signature Validation Bug Let Malware Bypass Several Mac Security Products

A years-old vulnerability has been discovered in the way several security products for Mac implement Apple's code-signing API that could make it easier for malicious programs to bypass the security check, potentially leaving millions of Apple users vulnerable to hackers. Josh Pitts, a researcher...