alt=Image illustrating steps to remove Safari from a Mac, highlighting a recent macOS vulnerability affecting privacy controls.

2024-10-19 Post a Comment

Microsoft Reveals macOS Vulnerability that Bypasses Privacy Controls in Safari Browser

î „Ravie Lakshmanan Microsoft Reveals macOS Vulnerability Microsoft has disclosed details about a now-patched security flaw in Apple’s Transparency, Consent, and Control (TCC) framework in macOS that has likely come under exploitation to get around a user’s privacy preferences and access data. The shortcoming, codenamed HM Surf by the tech giant, is tracked as CVE-2024-44133. It wasÂ addressedÂ by Apple as part of macOS Sequoia 15 by removing the vulnerable code. HM Surf […]

alt=A white Apple headset with blue lenses, perfect for immersive audio and visual experiences.

Cyber security

2024-02-08 Post a Comment

Apple fixes zero-day bug in Apple Vision Pro that â€˜may have been exploitedâ€™

By Zack Whittaker@zackwhittakerÂ A day after reporters published their first hands-on review of Appleâ€™s Vision Pro, the technology giant released its first security patch for the mixed reality headset to fix a vulnerability that â€œmay have been exploitedâ€ by hackers in the wild. On Wednesday, Apple released visionOS 1.0.2, the software that runs on the Vision Pro, with a fix for a vulnerability in WebKit, the browser engine that runs […]

alt=An anonymous hacker intensely focused on a laptop, working diligently to exploit vulnerabilities.

Cyber security

2024-02-02 Post a Comment

UK law could ban Apple security updates across the world in an ‘unprecedented overreach’

ByÂ Allisa James AppleÂ is no stranger to controversy, especially involving government bodies. But a new proposal could aim to be â€œunprecedentedâ€ in its reach over the tech giant. Several amendments to the UKâ€™s Investigatory Powers Act (IPA) have been proposed, one that would require Apple (and any other company) to â€œnotify UK officials of any updates they planned to make that could restrict the UK government’s access to this data, including […]

Cyber security

2024-01-10 Post a Comment

CISA Flags 6 Vulnerabilities – Apple, Apache, Adobe , D-Link, Joomla Under Attack

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) hasÂ addedÂ six security flaws to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence of active exploitation. This includesÂ CVE-2023-27524Â (CVSS score: 8.9), a high-severity vulnerability impacting the Apache Superset open-source data visualization software that could enable remote code execution. It was fixed in version 2.1. Details of the issueÂ first came to lightÂ in April 2023, with Horizon3.ai’s Naveen Sunkavally describing it as a “dangerous default configuration […]