Security News

CoSoSys announces zero-day support, kextless agent for macOS customers
2020-06-22 02:00

CoSoSys announced its commitment to offer zero-day support and the launch of a kextless agent for customers who manage Apple devices in the organization. "For us, it was important from the beginning to provide a DLP solution that focuses on the needs of customers with large macOS deployments," said Roman Foeckl, CEO and founder of CoSoSys.

How to encrypt an external drive or card in macOS
2020-06-04 14:59

Depending on your platform, you might have to install third-party software to encrypt externally-attached drives, such as USB drives and memory cards. I want to walk you through the steps of encrypting an SD card using only the included software on a MacBook Pro, running macOS 10.15.5.

New fuzzing tool for USB drivers uncovers bugs in Linux, macOS, Windows
2020-05-28 12:09

With a new fuzzing tool created specifically for testing the security of USB drivers, researchers have discovered more than two dozen vulnerabilities in a variety of operating systems. "USBFuzz discovered a total of 26 new bugs, including 16 memory bugs of high security impact in various Linux subsystems, one bug in FreeBSD, three in macOS, and four in Windows 8 and Windows 10, and one bug in the Linux USB host controller driver and another one in a USB camera driver," Hui Peng and Mathias Payer explained.

Apple Patches Over 40 Vulnerabilities in macOS Catalina
2020-05-27 14:22

Apple this week released security updates to address over fifty vulnerabilities impacting macOS and Safari. Eighteen of these vulnerabilities are specific to macOS Catalina, but many impact macOS High Sierra and macOS Mojave as well, and patches were released for those platform iterations as well.

Encrypt compressed files the easy way from Windows, macOS, or Linux
2020-05-19 16:04

Learn to secure multiple documents by encrypting compressed files on various OSes using a password. When considering how to share data efficiently, cloud storage has a leg up on hardware by making it easy to share files and folders with users across the globe with a few clicks.

How to encrypt compressed files the easy way from Windows, macOS, or Linux
2020-05-19 16:04

Learn to secure multiple documents by encrypting compressed files on various OSes using a password. When considering how to share data efficiently, cloud storage has a leg up on hardware by making it easy to share files and folders with users across the globe with a few clicks.

Lazarus Group Hides macOS Spyware in 2FA Application
2020-05-06 21:10

Taking a closer look at the malware, the malicious Mac executable is located in "Contents/Resources/Base.lproj/" directory of the fake application and pretends to be a nib file, according to researchers at Malwarebytes, in a posting on Wednesday. Once it starts, it creates a property list file that specifies the application that needs to be executed after reboot, and the content of the plist file is hardcoded within the application.

How to securely configure screen sharing remotely on macOS Catalina
2020-04-27 20:11

MacOS Mojave focused on securing macOS features by restricting what permissions apps have to the user's system and the data it contains. One example of these types of restrictions set by default is when enabling the screen sharing protocol that allows IT to provide end-users with hands-on support when troubleshooting issues affecting their devices.

Alleged Zoom Zero-Days for Windows, MacOS for Sale, Report
2020-04-16 13:42

Flaws target Zoom clients for the Windows and the MacOS operating system, according to a published report by Vice Motherboard. The Windows code could be a significant threat to Zoom users, according to experts quoted by Motherboard.

Apple's latest macOS Catalina update mysteriously borks SSH for some unlucky fans. What could be the cause?
2020-04-01 10:30

Apple's latest update to macOS Catalina appears to have broken SSH for some users. The issue is that under Apple's macOS 10.15.4 update, released on March 24, trying to open a SSH connection to a port greater than 8192 using a server name, rather than an IP address, no longer works - for some users at least.