Collaborate Disseminate
RSA report on rogue mobile apps; Android Man-in-the-Disk attack; using AppMon to reveal eavesdropping apps; bypassing alerts with a synthetic mouse click
The post Three mobile app issues and a Mac 0-Day appeared first on Security Boulevard.
Continue reading Three mobile app issues and a Mac 0-Day
Apple 0-Day allows hackers to mimic mouse-clicks for kernel access, despite mitigations. Continue reading DEF CON 2018: Apple 0-Day (Re)Opens Door to ‘Synthetic’ Mouse-Click Attack
A Black Hat talk demonstrates the ease of poking holes in firewalls: How to break, bypass and dismantle macOS firewall products. Continue reading Patrick Wardle on Breaking and Bypassing MacOS Firewalls
Researcher brings Apple down to earth, addressing Mac malware questions and the company’s smart moves to bolster security. Continue reading Newsmaker Interview: Patrick Wardle Talks Apple Malware Flubs and Successes
Researchers demonstrate how an encrypted macOS hard drive can still leak unprotected data via the operating system’s Finder and QuickLook feature. Continue reading macOS QuickLook Feature Leaks Data Despite Encrypted Drive
Patrick Wardle’s ‘Do Not Disturb’ app, and Apple’s updates
The post Evil maids and Apple debugs appeared first on Security Boulevard.
Continue reading Evil maids and Apple debugs
ESET on Android malware, and Patrick Wardle’s analysis of cryptomining malware in the Mac App Store.
The post Android antics and MacOS malware appeared first on Security Boulevard.
Continue reading Android antics and MacOS malware
Patrick Wardle’s analysis of a macOS DNS hijacker
The post macOS DNS Hijacker appeared first on Security Boulevard.
Continue reading macOS DNS Hijacker
Apple rushed out an emergency patch that fixed an bug in High Sierra that revealed APFS volume passwords via the password hint feature. Continue reading Emergency Apple Patch Fixes High Sierra Password Hint Leak
The macOS Keychain attack, Signal’s new private contact discovery service, the Deloitte hack, and a handful of mobile stock trading app vulnerabilities are discussed. Continue reading Threatpost News Wrap, September 29, 2017