Friday, 24 March, 2023

Apple Fixes Bug That Let Malicious Apps Skirt MacOS' Security Protections

<p>Vulnerability in Apple&#39;s Gatekeeper security feature could have allowed attackers to compromise vulnerable Macs, it verifies that apps downloaded from the internet are from developers who have been notarized by Apple. The flaw, CVE-2022-42821, was first found by Microsoft principal security researcher Jonathan BarOr. The Achilles vulnerability exploits a file permissions model called Access Control Lists to add restrictive permissions to a downloaded file.</p> <quillbot-extension-portal></quillbot-extension-portal>