Apple shot in the heel by Achilles

Stefan Mileschin · 21st December 2022, 04:45

Critical Apple bug needed Microsoft to point it out before it was noticed

Remember the days when Apple mocked Microsoft's security? It now seems that the fruity cargo cult is relying on Vole to find flaws its software genii can't spot.

Microsoft has disclosed details of a now-patched security flaw in Apple macOS that could be exploited by an attacker to get around security protections imposed to prevent the execution of malicious applications.

Dubbed Achilles (CVE-2022-42821, CVSS score: 5.5), was addressed by the iPhone maker in macOS Ventura 13, Monterey 12.6.2, and Big Sur 11.7.2, describing it as a logic issue that could be weaponised by an app to circumvent Gatekeeper checks.

Microsoft 365 Defender Research Team Jonathan Bar Or said that gatekeeper bypasses such as this could be used as a vector for initial access by malware and other threats and could help increase the success rate of malicious campaigns and attacks on macOS.

https://fudzilla.com/news/56022-appl...el-by-achilles

21st December 2022, 04:45	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 148,738	Apple shot in the heel by Achilles Critical Apple bug needed Microsoft to point it out before it was noticed Remember the days when Apple mocked Microsoft's security? It now seems that the fruity cargo cult is relying on Vole to find flaws its software genii can't spot. Microsoft has disclosed details of a now-patched security flaw in Apple macOS that could be exploited by an attacker to get around security protections imposed to prevent the execution of malicious applications. Dubbed Achilles (CVE-2022-42821, CVSS score: 5.5), was addressed by the iPhone maker in macOS Ventura 13, Monterey 12.6.2, and Big Sur 11.7.2, describing it as a logic issue that could be weaponised by an app to circumvent Gatekeeper checks. Microsoft 365 Defender Research Team Jonathan Bar Or said that gatekeeper bypasses such as this could be used as a vector for initial access by malware and other threats and could help increase the success rate of malicious campaigns and attacks on macOS. https://fudzilla.com/news/56022-appl...el-by-achilles

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
Trade wars, not security, is Huawei's Achilles' heel	Stefan Mileschin	WebNews	0	9th July 2020 06:49
Apple A12 Gets a Die Shot	Stefan Mileschin	WebNews	0	27th September 2018 08:55
TechInsights Publishes Apple A12 Die Shot: Our Take	Stefan Mileschin	WebNews	0	27th September 2018 08:37
Apple just took a shot at Facebook's web-tracking empire	Stefan Mileschin	WebNews	0	6th June 2018 09:59
Apple has shot itself in the foot	Stefan Mileschin	WebNews	0	5th January 2018 05:38
Mantle shows promise, but its proprietary nature is still its achilles heel	Stefan Mileschin	WebNews	0	19th November 2013 06:42
Drone Tracking App Shot Down by Apple	Stefan Mileschin	WebNews	0	3rd September 2012 08:38
Windows 8's Achilles' heel: Metro applications	Stefan Mileschin	WebNews	0	16th July 2012 07:44
DNS servers--an Internet Achilles' heel	Sidney	WebNews	0	3rd August 2005 18:29
heel wat gba games	scorpion007	Mad Bargains	0	29th April 2003 18:37