Security researcher Snoolie K has published an in-depth analysis of a significant security flaw in WorkflowKit, which has been assigned CVE-2024-27821. This vulnerability, dubbed the “WorkflowKit Race Vulnerability,” targets the...
Apple users are urged to update their devices immediately following the discovery of two critical zero-day vulnerabilities actively exploited in the wild. These vulnerabilities, CVE-2024-44308 and CVE-2024-44309, leave millions of...
In a recent analysis, cybersecurity researchers Hichem Maloufi and Christian Mina detailed CVE-2024-44258, a symlink vulnerability affecting Apple’s ManagedConfiguration framework and the profiled daemon. This vulnerability allows attackers to manipulate...
In a recent report, Hunt researchers uncovered a sophisticated phishing campaign suspected to be linked to North Korean threat actors, primarily targeting users of Naver, South Korea’s largest tech platform....
Apple has introduced a Virtual Research Environment (VRE) to provide public access for testing the security of its Private Cloud Compute (PCC) system. Additionally, the company has open-sourced several critical...
A new report from Unit 42 researchers has uncovered significant weaknesses in macOS’s Gatekeeper security mechanism, which could allow malicious applications to bypass Apple’s verification process and execute harmful code...
In an unexpected turn of events, Apple has pulled the plug on the iPadOS 18 update for its M4 iPad Pro models after a wave of user reports claiming the...
Once Lost Mode is activated on an Apple device, it is incredibly difficult to disable unless done by the original owner or with the correct password. Without deactivating Lost Mode,...
An open-source project on GitHub called Docker-OSX allows users to effortlessly run Apple’s OSX and macOS systems through containers, a method akin to virtual machines but significantly more convenient than...
The U.S. regulatory body’s antitrust case against Google has recently seen significant developments. A U.S. federal judge has ruled that Google’s monopolistic dominance in the search and advertising markets constitutes...
Apple has recently made its homomorphic encryption technology, used to protect user privacy and security in its services, available through an open-source Swift package, facilitating easier implementation by developers to...
Apple has confirmed that macOS systems are vulnerable to a severe OpenSSH vulnerability dubbed “regreSSHion” (CVE-2024-6387). This unauthenticated remote code execution (RCE) flaw could allow attackers to gain full root...
A security researcher has published details and proof-of-concept (PoC) code for a CVE-2024-27815 vulnerability in the XNU kernel that could be exploited to execute arbitrary code with kernel privileges. The...
Apple has released a crucial security update for its iTunes software on Windows, addressing a severe vulnerability that could allow remote attackers to execute malicious code on users’ computers. The...
Apple has sent warnings to a growing number of users, alerting them about highly sophisticated mercenary spyware attacks. These attacks are not your typical phishing scams or malware; they are...
Support Securityonline.info site. Thanks!
Akira Ransomware Exploit CVE-2024-40766 in SonicWall SonicOS
October 21, 2024
