Security News

Week in review: MacOS ransomware, attackers bypassing WAFs, how to select a SIEM solution
2020-07-05 13:10

How do I select a SIEM solution for my business?To select an appropriate SIEM solution for your business, you need to think about a variety of factors. New EvilQuest macOS ransomware is a smokescreen for other threatsA new piece of ransomware dubbed EvilQuest is being delivered bundled up with pirated versions of popular macOS software, researchers warned.

macOS Privacy Protections Bypass Disclosed After Apple Fails to Release Fix
2020-07-01 15:30

Details on a macOS privacy protections bypass method were published this week, more than six months after Apple was informed of the issue, but failed to deliver a fix. Dubbed TCC, the privacy protections system was introduced in macOS Mojave to ensure that certain files on the system are kept out of reach of unauthorized applications.

New EvilQuest macOS ransomware is a smokescreen for other threats
2020-07-01 10:36

A new piece of ransomware dubbed EvilQuest is being delivered bundled up with pirated versions of popular macOS software, researchers warned. The ransomware is also a smokescreen, as its "Noisiness" is meant to hide other things happening on the system in the background: the installation of a keylogger and a reverse shell, and the exfiltration of files that contain valuable information.

After six months of stonewalling by Apple, app dev goes public with macOS privacy protection bypass
2020-07-01 02:32

Six months after software developer Jeff Johnson told Apple about a privacy bypass vulnerability opening up protected files in macOS Mojave, macOS Catalina, and the upcoming macOS Big Sur, the bug remains unfixed - so he's going public. This latest bug can be exploited by a maliciously crafted app to bypass a privacy system known as Transparency, Consent, and Control that was introduced in OS X Mavericks and got strengthened in subsequent releases through technologies like System Integrity Protection in El Capitan.

A New Ransomware Targeting Apple macOS Users Through Pirated Apps
2020-07-01 02:08

Cybersecurity researchers this week discovered a new type of ransomware targeting macOS users that spreads via pirated apps. According to several independent reports from K7 Lab malware researcher Dinesh Devadoss, Patrick Wardle, and Malwarebytes, the ransomware variant - dubbed "EvilQuest" - is packaged along with legitimate apps, which upon installation, disguises itself as Apple's CrashReporter or Google Software Update.

Safari refinements justify setting the browser as default in macOS Big Sur
2020-06-26 20:25

If Safari isn't your default Mac web browser, it should be when Apple releases macOS Big Sur. With macOS Big Sur improvements on the way, there's no doubt that Safari can handle responsibility.

iOS 14, macOS Big Sur, Safari to give us ‘No, thanks!’ option for ad tracking
2020-06-24 09:20

During the pre-taped keynote at Apple's Worldwide Developers Conference, the company promised to pump up data protection even more with gobs of new features in its upcoming iOS 14, macOS Big Sur, and Safari releases. The big ones include the option for users to decline apps' ad tracking.

New Privacy Features Added to the Upcoming Apple iOS 14 and macOS Big Sur
2020-06-23 08:29

During WWDC 2020 on Monday, the world's most valuable company announced the next versions of its operating systems - iOS 14 for iPhones, iPadOS 14 for iPads, watchOS 7 for Apple Watches, and macOS Big Sur for MacBooks - with new features and enhancements. What's important is that the company also highlighted a few new security and privacy features that have been added to the upcoming iOS 14 and macOS Big Sur systems, categorically aiming to help users:better control which apps installed on their devices can access their data,.

CoSoSys announces zero-day support, kextless agent for macOS customers
2020-06-22 02:00

CoSoSys announced its commitment to offer zero-day support and the launch of a kextless agent for customers who manage Apple devices in the organization. "For us, it was important from the beginning to provide a DLP solution that focuses on the needs of customers with large macOS deployments," said Roman Foeckl, CEO and founder of CoSoSys.

How to encrypt an external drive or card in macOS
2020-06-04 14:59

Depending on your platform, you might have to install third-party software to encrypt externally-attached drives, such as USB drives and memory cards. I want to walk you through the steps of encrypting an SD card using only the included software on a MacBook Pro, running macOS 10.15.5.