Apple has set up a triple protection mechanism, which is briefly summarized as follows:

• Block malware launch or execution: App Store or access control combined with notarization
• Prevent malware from running on customer systems: Gatekeeper, Notarization and XProtect
• Fix executed malware: XProtect

Wardle reported to Apple last year a vulnerability that could bypass the triple protection mechanism and created related tools to verify the feasibility.

It’s just that Apple still hasn’t adopted the vulnerability he reported, so he decided to share the side-channel attack method he discovered at the Defcon hacker conference.

Wardle has so far discovered three attack methods, one of which requires root access to the target Mac device, while the other two do not require root privileges.

The translation part is as follows:

 "Wardle also discovered two vulnerabilities that don't require root access to execute, disabling the background task manager that sends persistent notifications to users and security monitoring products.

 One of the vulnerabilities exploits a bug in how the alarm system communicates with the core of a computer's operating system, known as the kernel.

 Another exploited a vulnerability that allowed users, even those without deep system privileges, to put processes to sleep. Wardle discovered that this feature can be manipulated to hijack persistent notifications before they reach the user."

The post Apple’s triple protection mechanism can be bypassed, vulnerability in macOS appeared first on TechGoing.

HVNC is the abbreviation of Hidden Virtual Network Computing, which is a method to solve remote login (such as browser, operating system/plug-in version, locale, time zone, etc. to fingerprint the user’s system).

HVNC technology is mainly used in technical support services, but before starting the service, the user’s permission is required.

The HVNC malware exposed this time does not require the user’s permission and can launch attacks without the user’s knowledge.

The malware is sold on the dark web for $60,000 (currently about 431,000 RMB), including a reverse shell and a remote file manager. Current test results show that Mac devices with macOS 10 to 13.2 are affected, so users are recommended to upgrade to the latest 13.4.1 version as soon as possible.

The post Affecting macOS 10-13.2, Hackers Sell HVNC Malware for $60,000 appeared first on TechGoing.

The company says the malware developers are still refining its capabilities and increasing its destructive power. the current version of AMOS accesses keychain passwords, system information, files in the desktop and documents folders, and passwords for the Mac.

AMOS can also infiltrate browser applications such as Chrome and Firefox to extract autofill information, passwords, cookies, wallet and credit card information, and search encrypted wallets such as Electrum, Binance and Atomic to facilitate the theft of related information and property.

AMOS is sold with a web panel and costs $1,000 per month (currently about RMB 6,930). This means attackers can quickly get started and launch attacks on macOS users.

The malware spreads via .dmg files and once the device is infected, it immediately starts accessing sensitive information and sending it to a remote server. The system displays fake system prompts to obtain the system password and asks for access to files in the Documents and Desktop folders.

Because this requires users to click on a .dmg file to install, Mac users can avoid malware by not installing untrusted software from unverified sources. cyble Research recommends installing software from the Mac App Store, using strong passwords and multi-factor authentication, and using biometric authentication whenever possible.

The post AMOS malware for macOS exposed for stealing sensitive information appeared first on TechGoing.

The following are updates:

1. New features

• Importing Historical Messages
• Send and Receive Red Packet Messages
• Remote Assistance
• Group work
• New settings for login
• Support for creating group chats in the forwarding panel

2. New Experience

• “Optimised My Device search experience
• Search result page display optimisation

3. Bug fixes

• Several bugs have been reported

Tencent QQ macOS uses the new QQ NT architecture and supports global search capabilities to further enhance the efficiency of content search. QQ macOS also features continuous interoperability, with support for calling mobile devices to take photos, scan, draw and send them quickly, and support for sending and receiving QQ super emojis.

The post Tencent QQ macOS official version 6.9.17 update release, a number of important features appeared first on TechGoing.

The new interface is not enabled by default, and the media outlet has tweaked the code to show the effect of enabling it. The most notable improvement to the new interface is the addition of a sidebar for navigation. note: Apple has enabled the sidebar on iPad in iPadOS 15.2, and the new interface follows this change.

The “Apple TV” section on the left-hand navigation bar consists of “Watch Now” and “Apple TV+” options, plus quick access to MLS Season Pass, Showtime, or Starz are among the Apple TV channels users have subscribed to.

Under the “Store” category, users can purchase movies and TV shows through the iTunes Store. The “Library” category gives users access to previously purchased content, rentals, Family Sharing and more.

The post Apple redesigns TV app for macOS, introducing a new navigation bar on the left appeared first on TechGoing.

Outlook supports multiple email providers including Outlook.com, Gmail, iCloud and Yahoo Mail, and offers a unified inbox and universal search capabilities. The new version of Outlook is also optimized for Mac devices with Apple Silicon chips.

Microsoft redesigned Outlook on macOS in 2020, and the app supports Notification Center widgets, Handoff between macOS and iOS, and more.

The post Microsoft opens up Outlook email app for macOS without a Microsoft 365 subscription or license appeared first on TechGoing.

Apple has not previously specified its security update practices. It takes enterprising users and researchers to compare security patch notes and CVE numbers to determine what gets patched.

According to a new support document reported by Ars Technica, Apple says that only the most comprehensive security patches are available for the latest operating systems. On older systems, vulnerabilities will still be patched, but not all of them.

The support document is meant to define the difference between software updates and upgrades, but information about security patches is also included. It briefly mentions that older macOS versions are not as protected as the latest major system versions.

Not surprising for those who follow the industry. Apple will patch serious problems with operating systems that are years old, but not every patch will be universally applied.

For the average user, the best way to stay protected from vulnerabilities is to use the latest hardware and update to the latest available software. However, not every user will be able to upgrade their operating system as soon as the latest and greatest version is rolled out.

Some users will still stick with an older operating system. For example, as devices age, they lose the ability to run the latest software and are officially dropped from support for new upgrades.

For devices that can run the latest software, users sometimes decide to wait for a stable version to arrive, or for work-related applications to become compatible. Even when a new operating system has been introduced, Apple tends to release a small number of support updates for older systems.

For example, Apple recently released iOS 15.7.1, which includes a number of security fixes and patches. However, this update covers a smaller list of vulnerability entries than iOS 16.1.

The post Apple confirms patches for older iOS and macOS systems appeared first on TechGoing.