A big Monday for Apple news…
— Chance Miller (@ChanceHMiller) April 26, 2021
iOS 14.5: https://t.co/wgcOPQwkmD
App Tracking Transparency: https://t.co/LCXAKGqu0v
watchOS 7.4: https://t.co/uyCWJY5DqF
tvOS 14.5: https://t.co/ACEEbrJNfb
macOS Big Sur 11.3: https://t.co/Ug3KsiTucI
Apple Watch Unlock: https://t.co/zhAzn3wkmd
Apple introduces macOS 11.3 with big M1 improvements https://t.co/1nAbdV7glv
— XDA (@xdadevelopers) April 26, 2021
The macOS 11.3 update includes a massive security patch and new emoji https://t.co/mX8L3bHetO pic.twitter.com/SnBDdw15zO
— The Verge (@verge) April 26, 2021
(前澤友作さんのAI霊言) 事業を作るの?A. そんなの分かりません。https://t.co/flHkl6owIU
— ふぁんてな⚡ (@fantenna3) April 26, 2021
#THE #VERGE #The #macOS #11.3 #update #includes
"All the user would need to do is double click — and no macOS prompts or warnings are generated," @cedowens, who discovered the bug, told me. His proof of concept opened Calculator, but a malicious actor could use the same bug to steal user data.
— Zack Whittaker (@zackwhittaker) April 26, 2021
More: https://t.co/kq44jQHreP pic.twitter.com/zji88sBwG0
Kudos to Apple for quickly fixing the bug I reported to them. Here is my blog that delves into how I weaponized this bug with a payload: https://t.co/Bj8bQbpLx5. Thanks @patrickwardle for helping dive into the vuln as well ?? pic.twitter.com/tnMo3is0K8
— Cedric Owens (@cedowens) April 26, 2021
After @patrickwardle's writeup on the bug found by @cedowens in macOS, my team over at @JamfSoftware Protect found the bug being (ab)used in the wild ?https://t.co/8dhKTHw5z5@objective_see - https://t.co/JmjJCpX23Khttps://t.co/rtwZyn90muhttps://t.co/G2J4NEu5V6
— Stuart Ashenbrenner ?? ?? (@stuartjash) April 26, 2021
Safari in macOS 11.3 now supports WebM and Vorbishttps://t.co/B5yFPoJe7g pic.twitter.com/3uhatyvt2o
— Thomas Schranz ? (@__tosh) April 26, 2021
New: Apple has fixed a zero-day security vulnerability that allowed the notorious Shlayer malware to bypass most of macOS' in-built security protections.https://t.co/Q0j63hdSAg
— Zack Whittaker (@zackwhittaker) April 26, 2021
ICYMI: Jamf's cybersecurity experts in-depth research on the malicious Shlayer macOS malware.https://t.co/Bl6509rKcx
— Jamf (@JamfSoftware) April 26, 2021
In collaboration w/ @JamfSoftware, we uncovered the fact that attackers were *already* exploiting this flaw successfully as an 0day ?
— Objective-See (@objective_see) April 26, 2021
Shortly, they'll be posting more about their findings & analysis: "Shlayer Malware Abusing Gatekeeper Bypass On Macos": https://t.co/wl1bj66Z7j pic.twitter.com/fcnk7I06Kg
NEW: hackers were exploiting a "massive" bug in MacOS that allowed them to push malware that bypassed vortually all of Apple's security mechanisms on its operating system.
— Lorenzo Franceschi-Bicchierai (@lorenzofb) April 26, 2021
Researchers found one hacking group exploiting the bug since January of this year.https://t.co/AqeuFijmZX
Update to macOS 11.3 immediately. It patches a major flaw in how Apple prevents malicious software from running, and it has already been seen in the wild. https://t.co/ELpZy0iMWC
— Glenn Fleishman (@GlennF) April 26, 2021
Update your macOS systems to 11.3, as it contains a patch for a massive bug that affects all recent versions of #macOS quarantine & gatekeeper.
— Odisseus (@_odisseus) April 26, 2021
"Unfortunately users kept infecting themselves ... simply clicking through File Quarantine alerts"https://t.co/ohSKp9k4be pic.twitter.com/Y8e3ypcARB
"But first, go update your macOS systems to 11.3, as it contains a patch for a massive bug that affects all recent versions of macOS…a bug that is the topic of this blog post." https://t.co/YoYGq87egE
— Arek Dreyer (@arekdreyer) April 26, 2021
mac notarization may have introduced a big security bug: https://t.co/pTu4w8T9s1
— Vanessa McHale (@vamchale) April 26, 2021