2 years, 3 months ago

Apple fixes Mac Gatekeeper bypass vulnerability affecting even Lockdown Mode devices

Apple fixed a serious vulnerability in its Mac Gatekeeper that could allow malware to bypass checks and infect devices via untrusted applications, according to a report from BleepingComputer. The flaw would allow attackers to abuse a logic issue to set Restrictive Control List Permissions, which is designed to block web browsers and internet downloaders from downloading and setting quarantine restrictions on downloaded files. Microsoft said that since Apple’s Lockdown Mode, designed as an optional protection feature for high-risk users, is aimed to stop zero-click remote execution vulnerabilities, it does not protect against Achilles. Apple is currently also testing a new Rapid Security Response feature that will allow both Mac and iOS devices to quickly receive security patches without the need to update the full operating system.

The Hindu

Discover Related