Researcher shows that for months macOS had a flaw that would let apps run despite not being notarized by Apple's service; bug is patched in macOS Big Sur 11.3
Old malware, new tricks. — Apple has spent years reinforcing macOS with new security features to make it tougher for malware to break in.
TechCrunch Zack Whittaker
Related Coverage
- All Your Macs Are Belong To Us Objective-See's Blog · Patrick Wardle
- macOS Gatekeeper Bypass (2021 Edition) Medium · Cedric Owens
- Shlayer malware abusing Gatekeeper bypass on macOS Jamf Blog · Jaron Bradley
- Actively exploited Mac 0-day neutered core OS security defenses Ars Technica · Dan Goodin
- View article Apple Support
- View article Computerworld
- Update Your Mac Now: The ‘Worst Hack In Years’ Hits Apple Computers Forbes · Thomas Brewster
- Apple Patches macOS Security Bypass Vulnerability Exploited by ‘Shlayer’ Malware SecurityWeek · Eduard Kovacs
- View article International Business Times
- Apple Patches Zero-Day MacOS Bug That Can Bypass Anti-Malware Defenses Threatpost · Elizabeth Montalbano
- Apple releases macOS 11.3 with M1 improvements, malware fix, much more 9to5Mac · Michael Potuck
- View article Six Colors
- View article MUO
- View article The Mac Observer
- Update Your Mac Right Now to Avoid This Massive Security Bug Gizmodo · Lucas Ropek
- macOS 11.3 kills dangerous zero-day flaw — update right now Tom's Guide · Luke Wilson
- Apple patches macOS zero-day exploited by malware for months (CVE-2021-30657) Help Net Security · Zeljka Zorz
- macOS 11.3 Fixes Crucial Security Vulnerability That Bypassed Malware Protection Wccftech · Ali Salman
- MacBooks face serious malware risk — update to macOS Big Sur 11.3 ASAP Laptop Mag · Kimberly Gedeon
- macOS 11.3: How to Use Two HomePods With a Mac for Stereo Audio Output MacRumors · Tim Hardwick
- Apple releases macOS Big Sur 11.3 update, focuses on M1 improvements, security fixes, assortment of other changes O'Grady's PowerPage · Chris Barylick
- Hackers Exploit 0-Day Gatekeeper Flaw to Attack MacOS Computers The Hacker News · Ravie Lakshmanan
- Shlayer macOS malware abuses zero-day to bypass Gatekeeper feature Security Affairs · Pierluigi Paganini
- Apple patches Gatekeeper bypass bug abused by malware gang The Record · Catalin Cimpanu
- Update now: critical macOS security flaw patched in Big Sur 11.3 TechRadar · Harry Domanski
- About the security content of iOS 14.5 and iPadOS 14.5 Apple Support
- Researchers Say ‘Massive’ MacOS Bug Was Exploited by Hackers VICE · Lorenzo Franceschi-Bicchierai
- Mac users, download macOS 11.3 now to fix major security flaw Mashable · Jack Morse
- tvOS 14.5 adds color balancing, new controller support, and more iMore · Joe Wituschek
- The macOS 11.3 update includes a massive security patch and new emoji The Verge · Mitchell Clark
- Apple Music Launches Top 25 Song Playlists for Over 100 Cities MacRumors · Sami Fathi
- Why does Apple hate audio on the Mac? Macworld · Michael Simon
- iOS 14.5, macOS 11.3 released OSnews · Thom Holwerda
- Praise be, macOS 11.3 finally lets you use two HomePods as a stereo pair iMore · Oliver Haslam
- Apple rolls out macOS Big Sur 11.3 update with some major upgrades Pocketnow · Nadeem Sarwar
- Apple Confirms Urgent Update For Millions Of MacBook Pro Users Forbes · Ewan Spence
- Apple releases macOS Big Sur 11.3 MacDailyNews
- Apple introduces macOS 11.3 with big M1 improvements XDA Developers · Brandon Russell
Discussion
-
@cedowens
Cedric Owens
on x
Kudos to Apple for quickly fixing the bug I reported to them. Here is my blog that delves into how I weaponized this bug with a payload: https://medium.com/.... Thanks @patrickwardle for helping dive into the vuln as well 🙏🏽 https://twitter.com/...
-
@micahflee
Micah
on x
This macOS quarantine/gatekeeper/notarization bypass vuln is wild in its simplicity. I just made this little video of typing out the exploit and executing an unsigned, unnotarized app bundle that can do anything it wants (in macOS 11.2.3) https://objective-see.com/... https://twi…
-
@patrickwardle
Patrick Wardle
on x
1⃣ Update to macOS 11.3, like now. 2⃣ Read about, IMHO, the worst macOS bug in recent memory (in terms of its ease of exploitability and potential impact to everyday Mac users). https://twitter.com/...
-
@lapcatsoftware
Jeff Johnson
on x
“It appears that this bug was introduced in macOS 10.15 ...thus older versions of macOS do not seem be vulnerable.” Staying on Mojave FTW! LOL do u even test ur code https://twitter.com/...
-
@jeremy_kirk
Jeremy Kirk
on x
@cedowens deserves a round of applause for finding this zero-day. He's the “anonymous researcher” in Apple's advisory, but that is an oversight that Apple is in the process of rectifying. https://support.apple.com/...
-
@patrickwardle
Patrick Wardle
on x
CVE-2021-1810 🍎: “a malicious app may bypass Gatekeeper” Researchers collaboratively publish: 1️⃣ Root cause 2️⃣ Patch analysis 3️⃣ Details of in-the-wild exploitation 4️⃣ Scripts for protections/detections 5️⃣ PoC exploit (to test #4) Vendors, do better pls! 😇🙏 https://twitter.c…
-
@edbott
Ed Bott
on x
Wait, I was told that Macs are completely immune from this sort of thing. Next you're gonna tell me Santa Claus isn't real. https://twitter.com/...
-
@objective_see
Objective-See
on x
In collaboration w/ @JamfSoftware, we uncovered the fact that attackers were *already* exploiting this flaw successfully as an 0day 😱 Shortly, they'll be posting more about their findings & analysis: “Shlayer Malware Abusing Gatekeeper Bypass On Macos”: https://www.jamf.com/... h…
-
@jamfsoftware
Jamf
on x
ICYMI: Jamf's cybersecurity experts in-depth research on the malicious Shlayer macOS malware. https://ow.ly/...
-
@stuartjash
Stuart Ashenbrenner
on x
After @patrickwardle's writeup on the bug found by @cedowens in macOS, my team over at @JamfSoftware Protect found the bug being (ab)used in the wild 👀 https://www.jamf.com/... @objective_see - https://objective-see.com/... https://medium.com/... https://www.forbes.com/...
-
@lorenzofb
Lorenzo Franceschi-Bicchierai
on x
NEW: hackers were exploiting a “massive” bug in MacOS that allowed them to push malware that bypassed vortually all of Apple's security mechanisms on its operating system. Researchers found one hacking group exploiting the bug since January of this year. https://www.vice.com/...
-
@zackwhittaker
Zack Whittaker
on x
“All the user would need to do is double click — and no macOS prompts or warnings are generated,” @cedowens, who discovered the bug, told me. His proof of concept opened Calculator, but a malicious actor could use the same bug to steal user data. More: https://techcrunch.com/... …
-
@zackwhittaker
Zack Whittaker
on x
New: Apple has fixed a zero-day security vulnerability that allowed the notorious Shlayer malware to bypass most of macOS' in-built security protections. https://t.co/Q0j63hdSAg
-
@atomicbird
@atomicbird
on x
Apple, please stop checking the “enable Siri” box after every macOS update. I will never, ever enable it on a Mac. Stop trying to trick me into turning it on.
-
@__tosh
Thomas Schranz
on x
Safari in macOS 11.3 now supports WebM and Vorbis https://support.apple.com/... https://twitter.com/...