Microsoft has released detail on a security department vulnerability that the party discovered in macOS Ventura . The exposure , which Microsoft dubbed “ Migraine , ” need Apple ’s Migration Assistant and allows a hacker to get by macOS ’s System Integrity Protection and get access to the data on the Mac .
In a blog post , Microsoft provides the technicaldetails on how Migraine works . Apple’sSIPprovides security for macOS to stop wildcat root access , but the Migration Assistant app has a privilege that allow it to have unrestricted radical memory access . Microsoft make a alter variant of Migration Assistant that takes advantage of this feat , but the alter app had to be used while the Mac ’s Setup Assistant is in debug mode . Microsoft ’s research worker were able to utilize the feat and then endure an AppleScript that mounted a Time Machine backup with infected data , which was transferred to the Mac .
The Migraine exposure uses Migration Assistant to obtain solution admittance on an infected Mac .
Apple
Documented asCVE-2023 - 32369 in the CVE.report database , Apple fixed “ Migraine ” with themacOS Ventura 13.4,macOS Monterey 12.6.6 , and macOS Big Sur 11.7.7updates released about two weeks ago and is noted in Apple ’s security annotation . It is customary for security researcher to print their findings after Apple has unsex the exposure . In the Impact section , Apple aver the flaw could tolerate an app to qualify protect parts of the file system .
To see if the update is installed , checkSoftware UpdateinSystem configurations / Preferences . you may also set up the update from there . Installation requires an net connexion and the update is over 2 GB , so you take to set aside some time to download , install , and reset your Mac .
Apple has protections in place within macOS and the company releases security bandage through OS update , so it ’s important to install them as soon as potential . Macworld has several guide to help keep your Mac safe , let in a scout onwhether or not you need antivirus software , alist of Mac computer virus , malware , and trojans , and acomparison of Mac security measures software .
