macOS>In The News

Process injection: breaking all macOS security layers with a single vulnerability

CommunityNews

CommunityNews

Process injection: breaking all macOS security layers with a single vulnerability

Process injection: breaking all macOS security layers with a single vulnerability.
If you have created a new macOS app with Xcode 13.2, you may noticed this new method in the template:

  • (BOOL)applicationSupportsSecureRestorableState:(NSApplication *)app { return YES; } This was added to the Xcode template to address a process injection vulnerability we reported!
    In macOS 12.0.1 Monterey, Apple fixed CVE-2021-30873. This was a process injection vulnerability affecting (essentially) all macOS AppKit-based applications. We reported this vulnerability to Apple, along with methods to use this vulnerability to escape the sandbox, elevate privileges to root and bypass the filesystem restrictions of SIP.

Read in full here:

This thread was posted by one of our members via one of our news source trackers.

View thread on forum
#macos/security
0 1308 0

Where Next?

View thread on forum
security
macos
Home macOS>In The News
#macos/security
0 1308 0
Last post

Popular Macos topics Top

First poster: bot
macOS>In The News

Apple's Oct. 13 event: What to expect and how to watch
The iPhone 12 announcement might be right around the corner. Tech experts predict Apple will reveal this new line of mobile devices durin...
techrepublic.com
#apple
0 875 0
New
First poster: bot
macOS>In The News

Amazon cuts off Parler’s web hosting following Apple, Google bans
arstechnica.com
#apple#google#hosting#web
0 949 0
New
First poster: teipanso
macOS>In The News

Apple complies with Dutch ruling allowing apps to use other payment systems
Apple complies with Dutch regulator’s ruling allowing apps to use other payment systems. Apple now allows dating app developers to use p...
nltimes.nl
#apps#apple
0 1025 3
New
First poster: Maartz
macOS>In The News

An Ode to Apple’s Hide My Email
An Ode to Apple’s Hide My Email. Apple’s Hide My Email feature is one of the most under-rated privacy launches of the past year, and her...
empty.coffee
#apple#email
8 887 2
New
First poster: bot
macOS>In The News

Linus Torvalds uses an Arm-powered M2 MacBook Air to release latest Linux kernel
More people using Arm hardware will (eventually) lead to better Arm software.
arstechnica.com
#linux#arm#macbook
0 949 0
New
First poster: bot
macOS>In The News

Apple is building an ad empire as its iPhone privacy crackdown weakens rivals
Apple builds new ad empire after kneecapping competitors. The tech giant is ramping up an ad business just as its iPhone privacy policy ...
axios.com
#apple#privacy#iphone
0 873 0
New
First poster: bot
macOS>In The News

Apple reportedly wants to turn the iPad into a smart display with a new dock
Apple reportedly wants to turn the iPad into a smart display with a new dock. Apple could reveal an iPad docking accessory next year.
theverge.com
#apple#ipad
0 985 0
New
First poster: bot
macOS>In The News

Apple drops Lightning and home button from the base iPad, announces M2 iPad Pro
Also: iPadOS 16 launches October 24.
arstechnica.com
#apple#ipad
0 915 0
New
First poster: peterchancc
macOS>In The News

macOS Ventura is now available
macOS Ventura is now available. macOS Ventura takes the Mac experience to a whole new level with groundbreaking capabilities that help u...
apple.com
#macos
6 1558 8
New
CommunityNews
macOS>In The News

The WinRAR Approach — Basic Apple Guy
The WinRAR Approach: a small change in how I distribute content to keep the content free, sustainable, & ad-free.
basicappleguy.com
#apple
0 635 0
New

Other popular topics Top

Devtalk
General Dev>Dev Chat

What dev-related stuff have you been up to?
Reading something? Working on something? Planning something? Changing jobs even!? If you’re up for sharing, please let us know what you’...
#community
1063 24245 395
New
DevotionGeo
Backend>Chat

What is the reason behind Rust’s web framework, Rocket, not performing as well as expected in the Techempower benchmarks?
I know that these benchmarks might not be the exact picture of real-world scenario, but still I expect a Rust web framework performing a ...
#web-frameworks/rust
36 7463 11
New
Exadra37
Linux>Questions

AMD or Intel for Programming with Linux as the OS?
I am thinking in building or buy a desktop computer for programing, both professionally and on my free time, and my choice of OS is Linux...
#mobile#android#web-development#linux#desktop-computer#mobile-development
36 6006 10
New
Rainer
Community>Journals

Programming Erlang Book Club
My first contact with Erlang was about 2 years ago when I used RabbitMQ, which is written in Erlang, for my job. This made me curious and...
/erlang/book-programming-erlang-2nd-edition#book-club
195 6815 95
New
PragmaticBookshelf
Backend>Learning Resources

Programming WebRTC
Use WebRTC to build web applications that stream media and data in real time directly from one user to another, all in the browser. ...
pragprog.com
#pragprog#published-book/js#webrtc/book-programming-webrtc
27 6969 6
New
husaindevelop
Android>Questions

Clipboard readtext not working in android webview
Inside our android webview app, we are trying to paste the copied content from another app eg (notes) using navigator.clipboard.readtext ...
#android#clipboard
1 5651 0
New
PragmaticBookshelf
Backend>Learning Resources

C Brain Teasers
25 puzzles that will make you a better C programmer by challenging your knowledge of the language, and explaining the technical details o...
pragprog.com
#pragprog#published-book/c/book-c-brain-teasers
4 3873 2
New
PragmaticBookshelf
Backend>Learning Resources

Simplicity
Fight complexity and reclaim the original spirit of agility by learning to simplify how you develop software. The result: a more humane a...
pragprog.com
#pragprog#published-book/book-simplicity
10 6553 8
New
PragmaticBookshelf
Backend>Learning Resources

Elixir Patterns
This book forgoes the abstract and instead provides concrete examples to help you better leverage the unique properties of Elixir, Erlang...
pragprog.com
#pragprog/elixir/erlang#published-book#beam/book-elixir-patterns
2 3476 2
New
pragdave
AI>Learning Resources

A Common-Sense Guide to AI Engineering
Build robust LLM-powered apps, chatbots, and agents while mastering AI engineering principles that will help you outlast the tools and th...
pragprog.com
#pragprog
17 1852 8
New
Back to top

Sponsor Spotlight

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Latest in Security

Security Portal ❯

macOS>In The News

macOS In The News ❯

Latest on Devtalk

Devtalk ❯

We ❤️ helpful members!

We reward our most helpful members via our MOTM scheme - by giving away a whopping 25 books per year!

Member of the Month

Devtalk Sponsors

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Erlang Solutions

We build trusted fault-tolerant systems that scale to billions of users.

Honeybadger

Real-time error tracking, performance insights, and observability for devs.

EEF

Supporting innovation across the BEAM ecosystem.

coders51

We build reliable cloud platforms for business-critical systems.

Manning Publications

Develop your skills with books, videos, and courses.

AppSignal

Catch errors, track performance, monitor hosts and more.

WyeWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that move you from confusion to "Aha, now I get it!"

Linux New Media

Publishing Linux Magazine, ADMIN, and MakerSpace for 25+ years.

View all our sponsors ❯

Categories:

Sub Categories:

Popular Portals

Devtalk Sponsors

Pragmatic Bookshelf

Practical resources that improve the lives of professional developers.

Erlang Solutions

We build trusted fault-tolerant systems that scale to billions of users.

Honeybadger

Real-time error tracking, performance insights, and observability for devs.

EEF

Supporting innovation across the BEAM ecosystem.

coders51

We build reliable cloud platforms for business-critical systems.

Manning Publications

Develop your skills with books, videos, and courses.

AppSignal

Catch errors, track performance, monitor hosts and more.

WyeWorks

Enabling companies to succeed by building software people love.

Pragmatic Studio

Courses that move you from confusion to "Aha, now I get it!"

Linux New Media

Publishing Linux Magazine, ADMIN, and MakerSpace for 25+ years.

View all our sponsors ❯

We're in Beta

About us Mission Statement See our Roadmap