Security researcher spots a macOS malware vulnerability that’s not yet patched

Be wary of network shares

When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.

Watch out for this potential vulnerability if you’re opening up apps on a Mac: a security researcher has worked out a way that malware makers can bypass the macOS Gatekeeper protections to run malicious code.

Filippo Cavallarin details the security holeon his websiteand explains how it gets around Gatekeeper – the feature that prompts users to confirm they want to install applications from outside the Mac App Store.

The key is in the way macOS handles network shares and treats them as safe: the system could be tricked into opening a zip file archive that contains malicious code. In theory, would-be hackers gets to run whatever code they like.

While the vulnerability would still require someone to open a zip file and trust the files it contains in order to work, it does seem to be a valid way of getting around the protections that Gatekeeper puts in place.

90-day deadline

Cavallarin says he toldAppleabout the issue 90 days ago and was assured it had been dealt with. However, the latest macOS 10.14.5 remains vulnerable, apparently.

“This issue was supposed to be addressed, according to the vendor, on May 15th 2019 but Apple started dropping my emails,” says Cavallarin. “Since Apple is aware of my 90 days disclosure deadline, I make this information public.”

As yet Apple hasn’t responded to Cavallarin’s report, and so we don’t know when the vulnerability is going to get patched up (or if it works in exactly the way Cavallarin has claimed in his report).

Get the best Black Friday deals direct to your inbox, plus news, reviews, and more.

Sign up to be the first to know about unmissable Black Friday deals on top tech, plus get all your favorite TechRadar content.

It’s a reminder to treat all incoming files with suspicion, whateveroperating systemyou’re running – especially if they have the ability to run code on your computer.

ViaAppleInsider

Dave is a freelance tech journalist who has been writing about gadgets, apps and the web for more than two decades. Based out of Stockport, England, on TechRadar you’ll find him covering news, features and reviews, particularly for phones, tablets and wearables. Working to ensure our breaking news coverage is the best in the business over weekends, David also has bylines at Gizmodo, T3, PopSci and a few other places besides, as well as being many years editing the likes of PC Explorer and The Hardware Handbook.

Your Mac’s menu bar will finally get a weather widget in macOS Sequoia 15.2 – plus these Apple Intelligence features

Planning to buy Apple’s new USB-C Magic accessories? Make sure you’re running macOS Sequoia 15.1 first

I’ve been covering Apple Watch deals for years – This is the one model most people should buy on Black Friday