Security News

You, Apple Mac fan. Put down the homemade oat-milk latte, you need to patch a load of security bugs, too
2020-05-28 15:45

Apple has alerted users about a bunch of security fixes for its software on supported versions of macOS that you ought to install as soon as you can. The SSLab trio also found CVE-2020-9801 in Safari that can be exploited by malware already running on a Mac to force the browser to open another application.

You, Apple Mac fan. Put down the homemade oat-milk latte, you need to patch a load of security bugs, too
2020-05-28 15:45

Apple has alerted users about a bunch of security fixes for its software on supported versions of macOS that you ought to install as soon as you can. The SSLab trio also found CVE-2020-9801 in Safari that can be exploited by malware already running on a Mac to force the browser to open another application.

North Korean Hackers Release Mac Variant of Dacls RAT
2020-05-07 14:46

North Korea-linked hacking group Lazarus has been leveraging a Mac variant of the Dacls Remote Access Trojan, Malwarebytes reports. Last year, security researchers identified at least two macOS-targeting malware families used by Lazarus in attacks, and a new one appears to have been added to their arsenal: a Mac variant of the Linux-based Dacls RAT. Initially identified by security researchers with Qihoo 360 NetLab in December 2019, the Dacls backdoor targeted both Windows and Linux systems.

Flaw hunter bags $75,000 off Apple after duping Safari into spying through iPhone, Mac cameras without permission
2020-04-07 17:58

Independent security researcher Ryan Pickren has revealed how a malicious website could hack Apple's Safari browser on iOS and macOS to spy on the user through the computer's camera without prompting for permission. Apple fixed the issues with Safari 13.1, crediting Pickren for three bug reports in the patch release notes.

VMware Fixes Privilege Escalation Vulnerability in Fusion for Mac
2020-03-18 15:02

VMware announced on Tuesday that it has patched a serious privilege escalation vulnerability that can be exploited on Mac systems where Fusion, Remote Console or Horizon Client are installed. The vulnerability, tracked as CVE-2020-3950 and classified as high severity, is related to the improper use of setuid binaries, and it impacts Fusion 11.x, VMRC 11.x and prior, and Horizon Client 5.x and prior.

5 free security apps to keep your Mac safe
2020-02-20 16:27

Avast Security for Mac is a solid choice and has been for a long time. Sophos Home Free for macOS. Sophos offers a great option for small businesses wanting to keep their networks clean: It can filter web content on up to three macOS or Windows devices for free.

Mac attacks on the rise
2020-02-18 14:44

Cyberattacks on Mac endpoints nearly doubled over those on Windows for the first time, according to the 2020 State of Malware Report. "We saw a significant rise in the overall prevalence of Mac threats in 2019, with an increase of over 400% from 2018,'' the report by Malwarebytes Labs stated."

Mac threats are growing faster than their Windows counterparts
2020-02-12 05:00

Mac threats growing faster than their Windows counterparts for the first time ever, with nearly twice as many Mac threats detected per endpoint as Windows threats, according to Malwarebytes. Mac threats are growing, other threats in the spotlight.

B-but it doesn't really get viruses! Not so, Apple fanbois: Mac malware is growing faster than nasties targeting Windows
2020-02-11 18:00

Malicious software targeting users of Apple Macs has leapt over the last year, the security outfit said in its latest State of Malware report. Describing this as an "Exponential" increase, the firm said that detections of nasties targeted against innocent Apple fanbois were up 400 per cent year-on-year, while adding the caveat that its Mac userbase had also grown a bit.

Apple patches critical bugs on iPhone and Mac – update now!
2020-01-29 17:39

Apple has just announced its latest round of security updates. There are plenty of critical holes patched in this raft of updates - so we strongly advise you to patch right away, before anyone figures out how to abuse these newly-documented holes for fun or profit.