Zero-Day in MacOS Could Reveal Keychain Passwords
NJCCIC Alert
Original Release Date: 2019-02-13
A new MacOS exploit, dubbed “KeySteal,” has been developed by German researcher Linus Henze to exploit a vulnerability that allows a malicious app running on a vulnerable system to access the passwords stored inside the MacOS password management system Keychain. Apple has not yet addressed the vulnerability.
The NJCCIC recommends reviewing the Forbes article on the zero-day and updating MacOS devices when a patch becomes available.
Featured Content
- Pulse Connect Secure Vulnerabilities Are Actively Being Exploited>
- Phishing Campaigns Attempt to Steal Credentials for Cloud Services>
- Geico Hack Impacts Residents in 8 States>
- SonicWall Email Security Vulnerabilities Are Actively Being Exploited>
- New Critical Vulnerabilities in On-Premises Microsoft Exchange Servers>
- Threat Actors Abuse Contact Forms in Recent Malware Campaigns>
- Google Chrome Vulnerabilities Exploited in the Wild – Patch Now>
- Increase in Ransomware Attacks Targeting Education Sector>
The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.
View our Privacy Policy here.
View our Site Index here.