Browsing tag
A Mac malware campaign targeting Xcode developers has been retooled to add support for Apple’s new M1 chips and expand its features to steal confidential information from cryptocurrency apps. XCSSET came into the spotlight in August 2020 after it was found to spread via modified Xcode IDE projects, which, upon the building, were configured to […]
urlhunter is a recon tool that allows searching on URLs that are exposed via shortener services such as bit.ly and goo.gl. The project is written in Go. How? A group named URLTeam (kudos to them) are brute forcing the URL shortener services and publishing matched results on a daily basis. urlhunter downloads their collections […]
Vulmap is a vulnerability scanning tool that can scan for vulnerabilities in Web containers, Web servers, Web middleware, and CMS and other Web programs, and has vulnerability exploitation functions. Relevant testers can use vulmap to detect whether the target has a specific vulnerability, and can use the vulnerability exploitation function to verify whether the […]
Notorious hacking group Lazarus which is also behind the widespread WannaCry ransomware is trying to infect Mac users with new malware that uses ‘fileless’ technique to hide from antivirus software. As highlighted by Patrick Wardle, a Mac security expert, this new malware deploys in-memory execution or fileless infection that involves malware not writing anything to […]
These are bad news for software programmers worldwide. Vulnerability testing researchers report the finding of 37 security flaws affecting four major implementations of Virtual Network Computing (VNC) open source software. Pavel Cheremushkin, researcher at Kaspersky Labs, was responsible for finding the vulnerabilities in LibVNC, TightVNC 1.x, TurboVNC and UltraVNC products. In his report, the expert […]
It’s not just you, we all want to know why the Mac system takes up so much of space. I am curious about it, however, it could be life and death for users who are about fill up their macOS disk storage. Now, there are several ways to approach the situation — You can use […]
Web application security specialists reported the appearance of two dangerous vulnerabilities in the Chrome browser, in addition to the active exploitation of one of these flaws to take control of the victims’ computers. Security flaws are present in the browser version for Windows, Mac, and Linux operating systems, and its users must update Chrome to […]
Internet Explorer is ridiculously slow, lame and justifies the prolonged scrutiny from users over the years. But, desperate times call for desperate measures. Those are the times when you need to have Internet Explorer or Microsoft Edge downloaded on your Mac to move forward with the task at hand. This task could be trying your website […]
A team of ethical hacking specialists from security firm Confiant has revealed the discovery of a new malware variant for Mac devices. Dubbed Tarmac, this strain is distributed through some malicious advertising campaigns in countries such as the US, Japan and Italy. In their report, the researchers mention that it all starts using malicious advertising, […]
Automated Vulnerability Scanner for XSS | Written in Python3 | Utilizes Selenium Headless Traxss is an automated framework to scan URLs and webpages for XSS Vulnerabilities. It includes over 575 Payloads to test with and multiple options for robustness of tests. View the gif above to see a preview of the fastest type of […]
A deadline that is about to close, coffee that is about to get cold, and the keyboard shortcut that you don’t know. All of this accumulated can get you in real trouble. Because seconds add up — Either it’s sifting through menus with a mouse or something simple as adding a new slide in Powerpoint. […]
Three years ago, Apple debuted its first bug bounty program for iOS devices. Many researchers criticized the tech giants decisions for not including macOS and other Apple platforms. It appears Apple has finally listened to developers and security experts who were previously pointing out macOS vulnerabilities for free. At the ongoing Black Hat 2019 conference […]
Python programming language has quickly gained popularity in recent years; however, it has a limitation when it comes to its app distribution. Developers can’t just share Python apps with a user who doesn’t know anything about the language. So, Mozilla developer, Gregory Szorc, has created a tool called PyOxidizer that will make it easier for […]
We rarely feature a story about MacOS security here in Hackercombat.com, as the platform is not really attractive for hackers to target. MacOS with its BSD underpinnings and minority market share compared to Redmond’s operating system we all call Windows, make it very unproductive for virus authors to bother with. However, from time-to-time, a prominent […]
Cybersecurity researchers from Intego are warning about possible active exploitation of an unpatched security vulnerability in Apple’s macOS Gatekeeper security feature details and PoC for which were publicly disclosed late last month. Intego team last week discovered four samples of new macOS malware on VirusTotal that leverage the GateKeeper bypass vulnerability to execute untrusted code […]
A nasty search hijacking malware which targets Apple MacOS devices, was spotted in the wild by security firm AiroAV last week. It can be used for MITM attacks on these devices. What’s different about the malware is its love for Microsoft, which is more than Google. It injects results from Bing when the user searches […]
IT security audit specialists discovered a flaw that exploits a security feature in the macOS system used to prevent malicious applications from accessing the camera, microphone, or personal data without the user’s explicit consent. The user’s privacy protection mechanisms in the macOS Mojave prevent applications installed from unofficial sources from being able to access information […]
Apple is set to kick-off this year’s Worldwide Developers Conference on June 3. It is the biggest Apple event next to the company’s autumn event when it unveils new iPhones. Like every year, Apple will introduce new operating systems for its hardware devices including iPhones, iPads, Apple Watch, Apple TV and MacBooks. Apple enthusiasts all […]
About three months ago, web application security specialists reported to Apple a vulnerability that allows hackers to trick an intelligent device user into running malicious applications by bypassing the Gatekeeper function. Now, it has been reported that the company hasn’t patched the vulnerability yet. Gatekeeper is an Apple mechanism for verifying code signing and applications […]
Apple released security updates along with iOS 12.2 release and fixed 51 security vulnerabilities that affected various Apple products including iOS, macOS, Safari, tvOS, iTunes, iCloud. iOS 12.2 released with the several security fixes that affected FaceTime, GeoServices, file, WebKit, Wi-Fi, Siri, Kernel and other iOS components. macOS Mojave 10.14.4 security updates fixed the various […]
Now you can protect your Mac devices with Microsoft’s famous Windows Defender ATP as the Redmond company has made available its security software for macOS. Windows Defender Advanced Threat Protection (ATP), Microsoft’s proprietary anti-malware suite for businesses, has been rebranded to Microsoft Defender ATP for reflecting the company’s cross-platform support plans for the security software. […]