MacOS High Sierra zero-day shows Keychain passwords in plain text
MacOS users who are starting the upgrade to High Sierra – and those who are using El Capitan – are vulnerable to a proof-of-concept attack that shows their online passwords in plain text, according to Synack security researcher Patrick Wardle.
He discovered that Mac Keychain, a native password management tool, can store online account usernames and passwords in plain text, allowing malicious applications direct access to the account details. However, the Keychain is generally protected by a master password.
Wardle revealed the details in a video that showed a demonstration of the attack.
Months on, many organisations still don't have secure remote access - report
FireEye revamps its flagship anti-malware solution
Trend Micro: COVID-19 related malware and spam on the rise
New report reveals key concerns of threat management pros in 2020
Bitdefender reveals new botnet which 'puts others to shame'
Data is more valuable to cyber attackers than cash - report
ExtraHop brings SaaS network detection and response solution to market
"Reveal(x) 360 is the culmination of a multi-year R&D investment to secure data centre, remote sites, and cloud workloads with frictionless deployment and actionable insights that can be securely accessed from anywhere.”
New detection tool aims to catch Twitter bots in real time
Twitter recognises that it’s hard to tell just how much misinformation is out there on social media.
Webcast Series: Best security practices for a mobile workforce
Join an exclusive monthly webcast series to learn how to better secure your mobile workforce in the evolving threat landscape.
Proper authentication is the key to security. Now it's free
Usually if a cyber attacker gains access to your credentials, it's game over. Stand a fighting chance at no cost with this cutting edge authentication tool.
Swann releases two new smart security cameras
The solutions include tracking, night vision, and other features, supported by a connected application.
Cost-effective security key demand for MSPs
A new survey conducted by Omida and commissioned by Acronis shows that there is an “overwhelming” demand for security services among MSPs.
