Collaborate Disseminate
A major macOS vulnerability in High Sierra was reported. Anyone can log in as “root” with an empty password. Learn more.
Categories:
Cybercrime
Mac Cybercrime
Tags: AppleHigh SierramacOSmacOS vunerabilityroot user
(Read more…)
The po… Continue reading Serious macOS vulnerability exposes the root user
Want to have god-like powers over a Mac? Just enter your username as root… no password required.
Continue reading Huge MacOS bug lets anyone login as root without a password: what you need to know
A new flaw discovered in Apple’s MacOS gives users a remarkably easy way to gain root access on machines. The bug, discovered Tuesday, allows people to bypass administrative accounts when trying to access various system preferences, such as network or privacy settings. When prompted to enter administrator credentials, a user can enter the username “root,” leave the password blank, and be granted access to the locked menus. The bug only activates after users attempt to sign in via the “root” name multiple times. Lemi Orhan Emrin, a Turkish software engineer, first announced the bug in a tweet on Tuesday. You can access it via System Preferences>Users & Groups>Click the lock to make changes. Then use “root” with no password. And try it for several times. Result is unbelievable! pic.twitter.com/m11qrEvECs — Lemi Orhan Ergin (@lemiorhan) November 28, 2017 CyberScoop editors reproduced the bug multiple times on their machines. Multiple security researchers […]
The post Serious flaw in Apple’s MacOS allows any user to gain full root access appeared first on Cyberscoop.
Continue reading Serious flaw in Apple’s MacOS allows any user to gain full root access
Today Apple has released security updates for macOS, iOS, tvOS, watchOS and Safari. Also released were previously undisclosed notes about security fixes from past updates.The biggest issue addressed in all operating systems was one or more KRACK vulnerabilities. Unfortunately Apple did not make those specific fixes available to all users. Read on to find out …
The post Apple Releases macOS 10.13.1 High Sierra, iOS 11.1 with Security Fixes appeared first on SecuritySpread.
The post Apple Releases macOS 10.13.1 High Sierra, iOS 11.1 with Security Fixes appeared first on Security Boulevard.
Continue reading Apple Releases macOS 10.13.1 High Sierra, iOS 11.1 with Security Fixes
Apple rushed out an emergency patch that fixed an bug in High Sierra that revealed APFS volume passwords via the password hint feature. Continue reading Emergency Apple Patch Fixes High Sierra Password Hint Leak
A severe programming error has been discovered in Apple’s latest macOS High Sierra 10.13 that exposes passwords of encrypted Apple File System (APFS) volumes in plain text.
Reported by Matheus Mariano, a Brazilian software developer, the vulnerability affects encrypted volumes using APFS wherein the password hint section is showing the actual password in the plain text.
Yes, you got that right—
Continue reading Apple macOS High Sierra Bug Exposes Passwords of Encrypted APFS Volumes As Hint
Apple yesterday rolled out a new version of its macOS operating system, dubbed High Sierra 10.13—a few hours before an ex-NSA hacker publicly disclosed the details of a critical vulnerability that affects High Sierra as well as all earlier versions of macOS.
Patrick Wardle, an ex-NSA hacker and now head of research at security firm Synack, found a critical zero-day vulnerability in macOS that
Continue reading Apple macOS High Sierra Exploit Lets Hackers Steal Keychain Passwords in Plaintext
Tracking cars, iOS 11 patches eight vulnerabilities, Equifax dumps their CEO, High Sierra gets slammed with a Zero-day, and more. Jason Wood of Paladin Security discusses an email DDos threat on this episode of Hack Naked News! News Passwords For 540,000 Car Tracking Devices Leaked Online – In the leaked S3 buckets deparment: The Kromtech Security Center […]
The post Equifax, iOS 11, Zero-day, and DDos threats – Hack Naked News #142 appeared first on Security Weekly.
Continue reading Equifax, iOS 11, Zero-day, and DDos threats – Hack Naked News #142