Secure Kernel Extension Loading

Gatekeeper Alone Won’t Mitigate Apple Keychain Attack

Posted on September 27, 2017 by Michael Mimoso

Apple said that macOS’ native Gatekeeper security feature would protect against a Keychain attack disclosed this week, but researcher Patrick Wardle said that won’t help against Mac malware signed with an Apple certificate. Continue reading Gatekeeper Alone Won’t Mitigate Apple Keychain Attack→

macOS High Sierra Available—And Vulnerable to Keychain Attack

Posted on September 26, 2017 by Michael Mimoso

Researcher Patrick Wardle has discovered a critical vulnerability that allows an attacker to dump passwords in plaintext from the macOS Keychain. The vulnerability is in macOS High Sierra, Sierra and El Capitan, and has yet to be patched. Continue reading macOS High Sierra Available—And Vulnerable to Keychain Attack→