Malware, Patch/Configuration Management, Vulnerability Management

Gatekeeper flaw opens Apple systems to intrusion

January 19, 2016

Apple's Gatekeeper program verifies that downloaded apps have been vetted on the Mac App Store. If an app is detected as coming from an unknown developer, one who lacks an Apple Developer ID, the program should be blocked.

Instead, a flaw, CVE-2015-7024, may enable hackers to get in, according to Kim Komando. "Once in, they can use malware to steal your personal information, take over your Mac and demand ransom, spy on you, and more," the blog said.

The flaw was reported last year by Synack researcher Patrick Wardle and Apple issued a fix. However, the company mitigated only some of the entry points through which hackers gain entry, so hackers can still get in, the blog reported. "It's vulnerable if you're not using the secure HTTPs protocol, or you're not accessing the app from the Mac App Store," says Kim Komando.

Apple is said to be working with experts to fix the flaw.

Greg Masters

North Korea hacking concept of a computer keyboard and a key painted with the North Korean flag

Threat Intelligence

Novel OtterCookie malware added to Contagious Interview attack arsenal

SC StaffDecember 27, 2024

BleepingComputer reports that intrusions with the new OtterCookie malware and its updated iteration have been launched by North Korean threat actors against software developers as part of the Contagious Interview campaign, which initially involved the deployment of the BeaverTail and InvisibleFerret payloads.

IoT

Vulnerable devices subjected to ongoing attacks with updated Mirai botnet

SC StaffDecember 26, 2024

BleepingComputer reports that intrusions involving a new Mirai-based botnet have been targeting Teltonika RUT9XX routers impacted by the CVE-2018-17532 flaw, TP-Link devices affected by CVE-2023-1389, and DigiEver DS-2105 Pro network video recorders with a yet-to-be patched remote code execution vulnerability as part of an attack campaign believed to have commenced in September.

Network Security

Novel BellaCiao malware variant launched by Charming Kitten

SC StaffDecember 26, 2024

Attacks with an updated C++ variant of the BellaCiao dropper malware dubbed "BellaCPP" have been deployed by Iranian state-backed threat operation Charming Kitten — also known as APT35, CharmingCypress, CALANQUE, Mind Sandstorm, TA453, Newscaster, and Yellow Garuda — to facilitate further payload delivery, according to The Hacker News.

Related Events

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

Related Terms

Adware Bug Buffer Overflow Disassembly