Mozilla has patched two zero-day security vulnerabilities in Firefox that allowed backdoors to be installed on Macs, bypassing Apple's usual XProtect and Gatekeeper protections. Firefox users should update the browser immediately.
Ars Technica's Dan Goodin:
As noted by Mac security expert Patrick Wardle, XProtect and Gatekeeper provided no protection in this case, as they only scan applications that have a quarantine flag set. Fortunately, this may change in macOS Catalina.
Firefox users on Mac should update the web browser to version 67.0.4 as soon as possible to keep themselves protected.
More details can be read at Ars Technica.
Ars Technica's Dan Goodin:
Mozilla released an update on Tuesday that fixed a code-execution vulnerability in a JavaScript programming method known as Array.pop. On Thursday, Mozilla issued a second patch fixing a privilege-escalation flaw that allowed code to break out of a security sandbox that Firefox uses to prevent untrusted content from interacting with sensitive parts of a computer operating system.The zero-days were exploited by unnamed hackers this week, but so far, attacks are known only to have targeted Mac users involved in cryptocurrency.
3/ We’ve seen no evidence of exploitation targeting customers. We were not the only crypto org targeted in this campaign. We are working to notify other orgs we believe were also targeted. We’re also releasing a set of IOCs that orgs can use to evaluate their potential exposure.
— Philip Martin (@SecurityGuyPhil) June 19, 2019
As noted by Mac security expert Patrick Wardle, XProtect and Gatekeeper provided no protection in this case, as they only scan applications that have a quarantine flag set. Fortunately, this may change in macOS Catalina.
Firefox users on Mac should update the web browser to version 67.0.4 as soon as possible to keep themselves protected.
More details can be read at Ars Technica.
28 comments
The United States Justice Department is launching a broad antitrust review into whether major technology companies are unlawfully stifling competition, reports The Wall Street Journal.
The DoJ...
Apple this week released iOS 12.4, the newest version of iOS 12 available for iPhones and iPads. One of the new features in iOS 12.4 is an updated data migration option that uses device to device...
Apple's mobile apps are often first in App Store search results ahead of competitors, according to a new analysis done by The Wall Street Journal.
For basic searches like "maps,"...
Apple plans to release an all-new 16-inch MacBook Pro in October, according to supply chain sources cited by Taiwan's Economic Daily News.
The report claims the 16-inch display will be a...
Apple is widely expected to unveil a trio of new iPhones in September, and 9to5Mac has revealed a few new features we can expect.
First, the report claims all three models will feature a...
Apple earlier this month introduced a surprise update to its MacBook Pro line, overhauling the entry-level 13-inch machine to bring it in line with more expensive models that were updated back in...
Apple is now in advanced talks to purchase Intel's smartphone modem chip business, reports The Wall Street Journal, citing people familiar with Apple's plans.
A deal that covers a...
Apple's iPhone XR was the best selling iPhone in the third fiscal quarter of 2019, according to new data shared today by Consumer Intelligence Research Partners (CIRP).
The iPhone XS, iPhone...
