macOS>In The News

Process injection: breaking all macOS security layers with a single vulnerability

CommunityNews

CommunityNews

Process injection: breaking all macOS security layers with a single vulnerability

Process injection: breaking all macOS security layers with a single vulnerability.
If you have created a new macOS app with Xcode 13.2, you may noticed this new method in the template:

  • (BOOL)applicationSupportsSecureRestorableState:(NSApplication *)app { return YES; } This was added to the Xcode template to address a process injection vulnerability we reported!
    In macOS 12.0.1 Monterey, Apple fixed CVE-2021-30873. This was a process injection vulnerability affecting (essentially) all macOS AppKit-based applications. We reported this vulnerability to Apple, along with methods to use this vulnerability to escape the sandbox, elevate privileges to root and bypass the filesystem restrictions of SIP.

Read in full here:

This thread was posted by one of our members via one of our news source trackers.

View thread on forum
#macos/security
0 1308 0

Where Next?

View thread on forum
security
macos
Home macOS>In The News
#macos/security
0 1308 0
Last post

Popular Macos topics Top

First poster: bot
macOS>In The News

Amazon cuts off Parler’s web hosting following Apple, Google bans
arstechnica.com
#apple#google#hosting#web
0 949 0
New
First poster: bot
macOS>In The News

Apple bans Fortnite from App Store during Epic Games legal battle
The game won’t be available on iPhones or other Apple devices until its legal battle with Epic Games ends.
bbc.co.uk
#games#apple
0 855 0
New
First poster: AstonJ
macOS>In The News

CodeEdit: Building a free, open-source code editor for macOS
GitHub - CodeEditApp/CodeEdit: CodeEdit App for macOS – Elevate your code editing experience. Open source, free forever… CodeEdit App fo...
github.com
#macos#code
11 1308 3
New
First poster: bot
macOS>In The News

Apple’s Private Relay can cause the system to ignore firewall rules
Apple’s Private Relay can cause the system to ignore firewall rules - Blog | Mullvad VPN. Apple’s Private Relay (Beta) feature calls hom...
mullvad.net
#apple#firewall
2 824 0
New
First poster: bot
macOS>In The News

M2 MacBook Pro’s 256GB SSD is only about half as fast as the M1 version’s
Higher-capacity versions of the new MacBook Pro don’t seem to be affected.
arstechnica.com
#ssd#macbook
0 972 0
New
First poster: bot
macOS>In The News

Linux distro for Apple silicon Macs is already up and running on the brand-new M2
Asahi’s work can help other OSes, alternate Linux distros boot on Apple hardware.
arstechnica.com
#linux#macs#apple
0 1194 0
New
First poster: bot
macOS>In The News

Apple’s Virtualization framework is a great, free way to test new macOS betas
VirtualBuddy and other apps make it pretty easy to run macOS on top of macOS.
arstechnica.com
#macos#apple#test
0 817 0
New
First poster: bot
macOS>In The News

Hackers may have exploited security flaws - Apple
Users of some models of iPhone, iPad and Mac are being urged to run “important” security update.
bbc.co.uk
/security#apple
0 1095 0
New
First poster: bot
macOS>In The News

Once again, Apple calls workers back to the office—once again, workers fight back
An internal petition says individual teams should set remote-work policies.
arstechnica.com
#office#apple
0 836 0
New
CommunityNews
macOS>In The News

Telegram CEO Accuses Apple of Crushing Entrepreneurs
Telegram CEO Accuses Apple of Destroying Dreams and Crushing Entrepreneurs. Telegram’s CEO has accused Apple of destroying dreams and ru...
macrumors.com
#apple#telegram
1 999 1
New

Other popular topics Top

PragmaticBookshelf
Game Dev>Learning Resources

The Ray Tracer Challenge
Brace yourself for a fun challenge: build a photorealistic 3D renderer from scratch! In just a couple of weeks, build a ray tracer that r...
pragprog.com
#pragprog#published-book/book-the-ray-tracer-challenge#algorithms
3 6115 0
New
DevotionGeo
Backend>Questions

Can someone explain the -t option/flag in docker run command?
I know that -t flag is used along with -i flag for getting an interactive shell. But I cannot digest what the man page for docker run com...
#docker
7 10261 2
New
Rainer
Community>Journals

Programming Erlang Book Club
My first contact with Erlang was about 2 years ago when I used RabbitMQ, which is written in Erlang, for my job. This made me curious and...
/erlang/book-programming-erlang-2nd-edition#book-club
195 6815 95
New
AstonJ
General Dev>Hardware

Poll: Which keyboard layout do you use?
poll poll Be sure to check out @Dusty’s article posted here: An Introduction to Alternative Keyboard Layouts It’s one of the best write-...
colemakmods.github.io
#polls/keyboards
10 6048 11
New
AstonJ
General Dev>Hardware

Keyboard thock (sound)
I’ve been hearing quite a lot of comments relating to the sound of a keyboard, with one of the most desirable of these called ‘thock’, he...
/keyboards#mechanical-keyboards
14 11197 8
New
rustkas
Backend>Chat

Using Regular Expressions in Erlang
Intensively researching Erlang books and additional resources on it, I have found that the topic of using Regular Expressions is either c...
/erlang#regular-expressions
91 5662 43
New
PragmaticBookshelf
Community>In The Spotlight

Spotlight: Mike Riley (Author) Interview and AMA!
Author Spotlight Mike Riley @mriley This month, we turn the spotlight on Mike Riley, author of Portable Python Projects. Mike’s book ...
#author-spotlight/python#iot/book-portable-python-projects#internet-of-things
62 7035 19
New
PragmaticBookshelf
Community>In The Spotlight

Spotlight: Rebecca Skinner (Author) Interview and AMA!
Author Spotlight Rebecca Skinner @RebeccaSkinner Welcome to our latest author spotlight, where we sit down with Rebecca Skinner, auth...
#author-spotlight/haskell/book-effective-haskell
106 11719 28
New
CommunityNews
General Dev>In The News

X can’t stop spread of explicit, fake AI Taylor Swift images
Will Swifties’ war on AI fakes spark a deepfake porn reckoning?
arstechnica.com
/swift
0 8379 0
New
PragmaticBookshelf
Backend>Learning Resources

Ash Framework
Explore the power of Ash Framework by modeling and building the domain for a real-world web application. Rebecca Le @sevenseacat and ...
pragprog.com
#pragprog/elixir#published-book/ash/book-ash-framework
15 7555 9
New
Back to top

Sponsor Spotlight

AppSignal

Catch errors, track performance, monitor hosts and more.

Latest in Security

Security Portal ❯

macOS>In The News

macOS In The News ❯

Latest on Devtalk

Devtalk ❯

We ❤️ helpful members!

We reward our most helpful members via our MOTM scheme - by giving away a whopping 25 books per year!

Member of the Month

Devtalk Sponsors

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Erlang Solutions

We build trusted fault-tolerant systems that scale to billions of users.

Honeybadger

Real-time error tracking, performance insights, and observability for devs.

EEF

Supporting innovation across the BEAM ecosystem.

coders51

We build reliable cloud platforms for business-critical systems.

Manning Publications

Develop your skills with books, videos, and courses.

AppSignal

Catch errors, track performance, monitor hosts and more.

WyeWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

Categories:

Sub Categories:

Popular Portals

Devtalk Sponsors

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Erlang Solutions

We build trusted fault-tolerant systems that scale to billions of users.

Honeybadger

Real-time error tracking, performance insights, and observability for devs.

EEF

Supporting innovation across the BEAM ecosystem.

coders51

We build reliable cloud platforms for business-critical systems.

Manning Publications

Develop your skills with books, videos, and courses.

AppSignal

Catch errors, track performance, monitor hosts and more.

WyeWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that move you from confusion to "Aha, now I get it!"

View all our sponsors ❯

We're in Beta

About us Mission Statement See our Roadmap