Alarming Zero-Day Mac Attack Gives Hackers Full System Control, Active Exploit
The National Cyber Security Centrum (NCSC) of the Netherlands says it has evidence that hackers are actively exploiting a vulnerability in one of macOS’ sharing features, which can provide attackers with complete access over a victim’s computer. This flaw was discovered across several macOS releases, including Tahoe, Sequoia and Sonoma.
The vulnerability stems from the authentication process failing due to “insufficient state management,” where macOS doesn't properly implement or enforce the steps necessary to authenticate a user's actions. This gives network attackers access to a system without valid login credentials. Not only does this provide access to a system, but it also enables attackers to complete additional actions a system wouldn’t normally allow without having to input the necessary credentials.
The Netherlands cybersecurity organization shared that it has been notified that “active abuse of this vulnerability has been observed on multiple systems on which port 5900 was accessible from the...
Copyright of this story solely belongs to hothardware.com. To see the full text click HERE
