Experts Uncover New CloudMensis Spyware Targeting Apple macOS Users — The Hacker News

🗓️ 19 Jul 2022 11:50:00Reported by The Hacker NewsType

New CloudMensis spyware targets Apple macOS using public cloud services to exfiltrate sensitive information, bypasses security frameworks, and exploits known vulnerabilities.

Reporter	Title	Published	Views	Family All 31
ATTACKERKB	CVE-2020-9934 - macOS Transparency, Consent, and Control (TCC) Framework bypass	16 Oct 202000:00	–	attackerkb
Apple	About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra	15 Jul 202000:00	–	apple
Apple	About the security content of iOS 13.6 and iPadOS 13.6	15 Jul 202000:00	–	apple
Apple	About the security content of iOS 13.6 and iPadOS 13.6 - Apple Support	15 Dec 202005:18	–	apple
Apple	About the security content of macOS Catalina 10.15.6, Security Update 2020-004 Mojave, Security Update 2020-004 High Sierra - Apple Support	15 Dec 202006:08	–	apple
Tenable Nessus	Apple iOS < 13.6 Multiple Vulnerabilities	17 Jul 202000:00	–	nessus
Tenable Nessus	macOS 10.15.x < 10.15.6 / 10.14.x < 10.14.6 Security Update 2020-004 / 10.13.x < 10.13.6 Security Update 2020-004	1 Oct 202000:00	–	nessus
BDU FSTEC	The vulnerability of the macOS operating system, related to the lack of protection for service data, allows attackers to disclose protected information.	14 Aug 202000:00	–	bdu_fstec
Circl	CVE-2020-9934	29 Jul 202021:39	–	circl
CISA KEV Catalog	Apple iOS, iPadOS, and macOS Input Validation Vulnerability	8 Sep 202200:00	–	cisa_kev