Japanese Cryptocurrency Exchange Falls Victim to JokerSpy macOS Backdoor Attack

An unknown cryptocurrency exchange located in Japan was the target of a new attack earlier this month to deploy an Apple macOS backdoor called JokerSpy. Elastic Security Labs, which is monitoring the intrusion set under the name REF9134 , said the attack led to the installation of Swiftbelt, a...

MacOS Malware: Myth vs. Truth – Podcast

Remember those ads with a sneezing guy in a suit who says he’s a PC and to stay away, he’s got that nasty virus that’s going around? “That’s OK,” says the young, hip guy in blue jeans: He’s a Mac. … as if any machine that runs code could possibly be immune to malware…? Boy, was that a stretch. Th...

New Variant of Chinese Gimmick Malware Targeting macOS Users

Researchers have disclosed details of a newly discovered macOS variant of a malware implant developed by a Chinese espionage threat actor known to strike attack organizations across Asia. Attributing the attacks to a group tracked as Storm Cloud, cybersecurity firm Volexity characterized the new...

Exploit for Out-of-bounds Write in Apple Macos

CVE-2021-30853 A simple POC script to test for CVE-2021-30657...

New AdLoad Variant Bypasses Apple's Security Defenses to Target macOS Systems

A new wave of attacks involving a notorious macOS adware family has evolved to leverage around 150 unique samples in the wild in 2021 alone, some of which have slipped past Apple's on-device malware scanner and even signed by its own notarization service, highlighting the malicious software ongoi...

AdLoad Malware 2021 Samples Evade Apple XProtect

A swelling wave of AdLoad malware infections in macOS devices is cresting its way past Apple’s on-device malware scanner, researchers said. The campaign is using around 150 unique samples, some of which are signed by Apple’s notarization service. AdLoad is a well-known Apple threat that’s been...

HP printer issue on Mac: What happened?

Apple holds the keys to nearly all recent Mac software. This is a story of those keys, and how a Hewlett Packard HP error caused problems for a lot of people. Code signing and certificates First, its important to understand that when I say "keys," what I really mean is "certificates." These...

How does macOS protect against malware?

Mac users often are told that "Macs don't get viruses." This is not really true, of course. Macs can and do get infected. However, it is true that macOS provides some basic protection against malware. This protection can be quite effective in some ways, but, unfortunately, quite ineffective in...

Is My Mac Secure from Malware and Viruses?

Do you own a Mac? If so, you might have the common perception that they’re more secure from internet threats than Windows PCs. Unfortunately, this isn’t the case. The truth is that Macs have historically not been targeted by hackers as frequently as Windows systems, simply because there were fewe...

Siemens Milestone XProtect Video Management Software Deserialization Elevation of Privilege Vulnerability

Siemens Milestone XProtect Video Management Software is a suite of video management software for managing surveillance video and other content. A deserialization elevation of privilege vulnerability exists in a .NET remote endpoint in multiple versions of Milestone XProtect Video Management...

CVE-2018-7891

The Milestone XProtect Video Management Software Corporate, Expert, Professional+, Express+, Essential+ 2016 R1 10.0.a to 2018 R1 12.1a contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution...

CVE-2018-7891

The Milestone XProtect Video Management Software Corporate, Expert, Professional+, Express+, Essential+ 2016 R1 10.0.a to 2018 R1 12.1a contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution...

Deserialization of untrusted data

The Milestone XProtect Video Management Software Corporate, Expert, Professional+, Express+, Essential+ 2016 R1 10.0.a to 2018 R1 12.1a contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution...

CVE-2018-7891

The Milestone XProtect Video Management Software Corporate, Expert, Professional+, Express+, Essential+ 2016 R1 10.0.a to 2018 R1 12.1a contains .NET Remoting endpoints that are vulnerable to deserialization attacks resulting in remote code execution...

CVE-2018-7891

The CVE-2018-7891 issue affects Milestone XProtect Video Management Software (VMS) versions 2016 R1 to 2018 R1. It is a deserialization vulnerability in .NET Remoting endpoints that could lead to remote code execution. The vulnerability is tied to vulnerable endpoints on the Recording/Management ...

How to tell if your Mac is infected

There are a lot of reasons Mac users don’t sweat getting infected. One: They’ve got a built-in anti-malware system called XProtect that does a decent job of catching known malware. Two: Macs are not plagued by a high number of attacks. Most cybercriminals are focused on infecting PCs. And three:...

HandBrake for Mac Compromised with Proton Spyware

The handlers of the open source HandBrake video transcoder are warning anyone who recently downloaded the Mac version of the software that they’re likely infected with malware. HandBrake warned users on Saturday of a compromise of one of its mirror download servers, and said anyone who grabbed th...

Apple Revokes Certificate Used By OSX/Dok Malware

Apple revoked a legitimate developer certificate used by hackers behind malware dubbed OSX/Dok, which was able to eavesdrop on secure HTTPS traffic of infected systems. On Sunday, Apple also rolled out an update to its XProtect built-in antimalware software to fend off existing and upcoming...

Mac GateKeeper vulnerability patch is invalid, it can still be bypassed to attack-vulnerability warning-the black bar safety net

Recently, security experts Patrick Wardle said earlier Apple released for the repair of reinforcing the Mac OS X GateKeeper vulnerability patch is invalid, cannot protect the user of Mac computer security. In 2 0 1 5 year 9 months, is exactly what Patrick Wardle first discovered the vulnerability...

Apple Issues Incomplete Patches for Gatekeeper Bypass

Apple has had two cracks at patching a vulnerability that allows malicious apps to bypass its OS X Gatekeeper security feature, and twice has taken a shortcut approach to the fix, said the researcher who reported the flaw. The latest measure to address this was released on Thursday and it appears...