/explore

Click through on any links that interest you or select the planets on the right to continue exploring the Outer Web.
You are here

 randomthoughts.greyhats.it
Roberto Paleari's blog: Mac OS X local privilege escalation (IOBluetoothFamily)
| | reverse.put.as
Patching what Apple doesn't want to or how to make your "old" OS X versions a bit safer | Reverse Engineering
1.0 parsecs away

Travel
| | Today a local privilege escalation vulnerability was disclosed in this blog post. It describes a vulnerability in IOBluetoothFamily kernel extension (IOKit is a never-ending hole of security vulnerabilities). Mavericks and most probably all previous versions are vulnerable but not Yosemite. The reason for this is that Apple silently patched the bug in Yosemite. This is not a new practice, where Apple patches bugs in the latest and newly released OS X version and doesn't care about older versions.
| | www.thezdi.com
Zero Day Initiative - Multiple Vulnerabilities in the Deep Sea Electronics DSE855
3.8 parsecs away

Travel
| |
| | www.welivesecurity.com
Watering hole deploys new macOS malware, DazzleSpy, in Asia
3.7 parsecs away

Travel
| | The website of a Hong Kong pro-democracy radio station was compromised to serve a Safari exploit that installed cyberespionage malware on visitors' Macs.
| | cocomelonc.github.io
Malware development: persistence - part 28. CertPropSvc registry hijack. Simple C/C++ example. - cocomelonc
17.6 parsecs away

Travel
|