Malwarecritical
Shlayer macOS malware abuses zero
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2021-1810 | A logic issue was addressed with improved state management | 5.5 | 1% | PoC | |
| CVE-2021-30657 | Actively Exploited Gatekeeper Bypass in Apple macOS | 5.5 | 69% | KEV | KEV |
From the original article
2 min read at securityaffairs.com
Apple addresses a zero-day in macOS exploited by Shlayer malware to bypass Apple’s security features and deliver second-stage malicious payloads. Apple has addressed a zero-day flaw in macOS that was exploited by Shlayer malware to bypass Apple’s File Quarantine, Gatekeeper, and Notarization security checks and download second-stage malicious payloads.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.