Microsoft Finds Apple Gatekeeper’s ‘Achilles’ Heel That Lets Threat Actors Bypass Security Checks

Microsoft Corporation (NASDAQ: MSFT) shared a macOS security flaw, dubbed Achilles, with Apple Inc. (NASDAQ: AAPL). The vulnerability has been fixed now.  

Microsoft Corporation (NASDAQ:MSFT) shared a macOS security flaw, dubbed Achilles, with Apple Inc. (NASDAQ:AAPL). The vulnerability has been fixed now.  

What Happened: Microsoft’s principal security researcher Jonathan Bar Or found and reported a vulnerability on Apple’s macOS devices. 

The bug could allow threat actors to get around Apple’s Gatekeeper security technology’s restrictions on how applications can be executed. Only trusted apps are allowed to run on Mac devices, thanks to these safeguards.

See Also: Apple, Microsoft’ Doing Very Little’ To Tackle Child Sexual Abuse Content, Says Australia 

“Fixes for the vulnerability, now identified as CVE-2022-42821, were quickly released by Apple to all their OS versions,” Microsoft stated in a blog post. 

Apple did not immediately respond to Benzinga’s request for comments. 

The Cupertino-based tech giant addressed the bug in macOS 13 (Ventura), macOS 12.6.2 (Monterey) and macOS 1.7.2 (Big Sur) on Dec. 13, reported Bleeping Computer. 

Why It’s Important: Gatekeeper is a macOS security feature that is designed to ensure that only trusted software approved by Apple runs on users’ Macs. 

However, according to Microsoft, while Gatekeeper is an effective security feature in stopping malware on macOS, it is “not bulletproof.”

The tech giant said multiple Gatekeeper bypasses had been identified in the past; some were abused by malware families such as Shlayer. 

The blog post ended on the note that cross-platform collaboration between tech giants is crucial to mitigate such cybersecurity issues effectively. 

Read Next: Big Regret: How Bill Gates’ Microsoft Missed Out On $159B By Selling Apple Stock WAY Too Early

Total
0
Shares
Related Posts
Read More

Reported Late Thursday, Delaware Investments National Municipal Income Fund Announces Board Approval Of New Investment Management Agreement With abrdn Inc. And Nomination Of Four New Trustees

Today, Delaware Investments National Municipal Income Fund (the "Fund"), a New York Stock Exchange American-listed closed-end fund trading under the symbol "VFL", announced that its Board of Trustees (the "Board") approved a new investment management agreement with abrdn Inc.

VFL