iOS 14.6: WebKit updatesīack in the limelight once again is our old friend, WebKit. You can grab the latest macOS Big Sur update from the Mac App Store. The weakness has reportedly been patched in the latest version of macOS Big Sur 11.4, which was released on Monday (May 24). It's a pretty darn serious vulnerability, not least because it's one that could be exploited to gain unauthorized access to users' files, but because it can record video and audio direct from the victims' computers while hijacking other apps’ permissions. "The exploit in question could allow an attacker to gain Full Disk Access, Screen Recording, or other permissions without requiring the user’s explicit consent," according to the Jamf researchers. In sidestepping this protection, the XCSSET malware is able to circumvent the safeguards to users' privacy.
( MacOS 10.15 Catalina and 10.14 Mojave got patches as well.)Ĭhief amongst the security issues facing macOS is a nasty strain of malware that secretly takes screenshots of users' Macs, making the need to get your system updated even more urgent.ĭuring research into the XCSSET malware, initially discovered back in August 2020, cybersecurity firm Jamf discovered that a macOS zero-day exploit (CVE-2021-30713) was used by XCSSET to bypass Apple's Transparency Consent and Control protections.Ībbreviated to TCC, this feature sounds the virtual alarm when an app is behaving in a way that could threaten users' privacy like, say, taking photos or logging keystrokes. Some of the same flaws are fixed in macOS Big Sur 11.4, which sees 58 flaws patched by Apple's count.
Apple counts 38 different flaws being fixed in iOS 14.6 and iPadOS 14.6, with some flaws having more than one Common Vulnerabilities and Exposures (CVE) reference number.
0 kommentar(er)
