A newly discovered zero-day vulnerability in Mac OS X allows hackers to execute code previously thought to be protected by Apple's new core defense, known as System Identity Protection (SIP).
"Our researchers recently discovered a significant flaw that allows local privilege escalation and bypass of System Identity Protection, Apple's new security feature," SentinelOne said in a blog post announcing the discovery.
https://www.secnews.gr/102377/kukloforise-to-prwto-weaponized-android-stagefright-exploit/The first Weaponized Android Stagefright exploit was released
SIP is a feature first introduced in El Capitan. It prevents users from changing system files through a rootless system that doesn't even let administrator accounts access certain files without first disabling SIP.
SentinelOne has shown in detail how hackers can attack SIP directly, bypassing traditional exploits to gain access to a system. Once the exploit is implemented, it is difficult to detect.
Once hackers bypass SIP, they have almost complete control over any device running OS X.
https://www.secnews.gr/102523/poia-xwra-dimiourgise-akadimia-gia-ekpaideusi-black-hat-hackers/Which country created an academy for training Black Hat Hackers?
Even worse, hackers could then use SIP as a shield to prevent the system from being repaired, a move that SentinelOne calls a protection racket.
Apple has been notified of the issue and is preparing a patch to fix it.
https://www.secnews.gr/102456/apple-released-imessage-patch/btn-large” variation=”btn-success”]Apple fixes serious encryption flaws in iMessage
