Google on Thursday shared details of a recently patched macOS Catalina zero-day vulnerability that targeted users visiting the websites of a Hong Kong media outlet and a pro-democracy group.
In late August, Google's Threat Advisory Group (TAG) discovered a watering hole attack that appeared to target people interested in Hong Kong politics, particularly pro-democracy issues. This particular attack vector does not seek to pinpoint users, but instead relies on techniques to push vulnerabilities to a wider audience.Impacted sites served an XNU privilege escalation vulnerability, identified as CVE-2021-30869, that was unpatched in macOS Catalina, allowing installation of a previously unreported backdoor on affected machines.
Read more...
from AppleInsider News https://ift.tt/30gXttX
In late August, Google's Threat Advisory Group (TAG) discovered a watering hole attack that appeared to target people interested in Hong Kong politics, particularly pro-democracy issues. This particular attack vector does not seek to pinpoint users, but instead relies on techniques to push vulnerabilities to a wider audience.Impacted sites served an XNU privilege escalation vulnerability, identified as CVE-2021-30869, that was unpatched in macOS Catalina, allowing installation of a previously unreported backdoor on affected machines.Read more...
from AppleInsider News https://ift.tt/30gXttX
Patched macOS Catalina vulnerability targeted Hong Kong users
![Patched macOS Catalina vulnerability targeted Hong Kong users]()
Reviewed by Ghaniiero
on
novembre 11, 2021
Rating:
Aucun commentaire: