Disclaimer: We may earn a commission if you make any purchase by clicking our links. Please see our detailed guide here.

Follow us on:

Google News
Whatsapp

Microsoft Researchers Help Apple Fix a Critical MacOS Bug

IANS
IANS
Meet the voice behind Indo-Asian News Service (IANS), a storyteller navigating the currents of global events with precision and depth. Crafting narratives that bridge cultures, IANS brings you the pulse of the world in every word

Join the Opinion Leaders Network

Join the Techgenyz Opinion Leaders Network today and become part of a vibrant community of change-makers. Together, we can create a brighter future by shaping opinions, driving conversations, and transforming ideas into reality.

Apple has fixed a security bug in its macOS software after Microsoft researchers alerted the iPhone maker about the vulnerability that could be used by hackers.

Microsoft discovered the vulnerability in macOS that could allow an attacker to bypass System Integrity Protection (SIP) in macOS and perform arbitrary operations on a device.

The bug allowed a potential attacker to install a hardware interface that allows them to “overwrite system files, or install persistent, undetectable malware”.

“We also found a similar technique that could allow an attacker to elevate their privileges to root an affected device. We shared these findings with Apple through Coordinated Vulnerability Disclosure (CVD) via Microsoft Security Vulnerability Research (MSVR),” Microsoft 365 Defender Research Team said in a statement.

In its latest security update, Apple issued a fix for this vulnerability, now identified as CVE-2021-30892.

SIP is a security technology in macOS that restricts a root user from performing operations that may compromise system integrity.

” We found that the vulnerability lies in how Apple-signed packages with post-install scripts are installed. A malicious actor could create a specially crafted file that would hijack the installation process,” the Microsoft researchers noted.

After bypassing SIP’s restrictions, the attacker could install a malicious kernel driver (rootkit), overwrite system files, or install persistent, undetectable malware.

As networks become increasingly heterogeneous, the number of threats that attempt to compromise non-Windows devices also increases.

The company said that Microsoft Defender for Endpoint on Mac enables organizations to gain visibility and detect threats on macOS devices.

“This research underscores the importance of collaboration among security researchers, software vendors, and the larger security community,” Microsoft added.

Join 10,000+ Fellow Readers

Get Techgenyz’s roundup delivered to your inbox curated with the most important for you that keeps you updated about the future tech, mobile, space, gaming, business and more.

Recomended

Partner With Us

Digital advertising offers a way for your business to reach out and make much-needed connections with your audience in a meaningful way. Advertising on Techgenyz will help you build brand awareness, increase website traffic, generate qualified leads, and grow your business.

Power Your Business

Solutions you need to super charge your business and drive growth

More from this topic