Security News

How one man could have hacked every Mac developer (73% of them, anyway)
2018-08-10 12:49

An inadvertently exposed login key could have spelled cybersecurity disaster for the Homebrew project, beloved of Mac developers everywhere.

Apple code signing flaw could have made Mac malware look legit
2018-06-18 14:37

For years it was possible to fool some security software into thinking malicious code had been digitally signed by Apple.

Mac users: Your antivirus software could be letting malware slip by undetected
2018-06-13 16:37

A flaw in how many third-party macOS security platforms verify Apple signed software could allow malware to pass itself off as signed, security researchers say.

Signature-Check Bug Let Malware Bypass Several Mac Security Products
2018-06-12 14:48

A years-old vulnerability has been discovered in the way several security products for Mac implement Apple's code-signing API that could make it easier for malicious programs to bypass the...

Code Signing Flaw Affects all Mac OS Versions Since 2005
2018-06-12 13:42

Okta Rex (Research and Exploitation) researcher Josh Pitts has discovered a method of exploiting the code signing mechanism in MacOS. If exploited, the flaw could allow malicious untrusted code to...

Starbucks site slurped, Z-Wave locks clocked, mad Mac Monero mining malware and much more
2018-05-26 14:01

Some security bites for the long weekend Roundup While this week was dominated by news of a new Spectre variant, the VPNFilter botnet, and TalkTalk's badbad routersrouters, plenty of other stories...

Starbucks site slurped, Comcast keys clocked, mad Mac Monero mining malware and much more
2018-05-26 14:01

Some security bites for the long weekend Roundup While this week was dominated by news of a new Spectre variant, the VPNFilter botnet, and TalkTalk's badbad routersrouters, plenty of other stories...

Macs Infected With New Monero-Mining Malware
2018-05-24 14:11

Many Mac users reported in the past few weeks that a process named “mshelper” had been eating up a lot of CPU power and draining their batteries. It turns out that the process is associated with a...

Self-destructing messages received on 'Signal for Mac' can be recovered later
2018-05-09 16:18

It turns out that macOS client for the popular end-to-end encrypted messaging app Signal fails to properly delete disappearing (self-destructing) messages from the recipient's system, leaving the...