“Worst” MacOS Security Bug Recently Patched by Apple

Reading Time: 1 Minute

With the sheer amount of people using the Internet, the number of cybercrimes committed has increased. In fact, a report from Security Boulevard informs us that by the end of this year, cybercrime will have cost the global economy over $6.1 trillion. There are new vulnerabilities to be exploited as well, and it just so happens that Apple security recently discovered (and patched) a huge security flaw in the macOS.

A bug not recognized by macOS

Apple tests and updates its OS every week, if not every few days, to continuously strengthen their system’s security. However, in March this year, the Apple security team discovered a vulnerability that lets people create malware that could take control of computers running on macOS. It can even control your systems’ functions, like opening your mail. And the malware can appear in the form of an app.

“All the user would need to do is [click on it] — and no macOS prompts or warnings are generated,” said Cedric Owens, the security researcher who discovered the vulnerability. Normally, macOS should automatically activate security mechanisms like File Quarantine and Gatekeeper when it detects suspicious apps in the system. This vulnerability lets apps bypass it.

MacOS researcher Patrick Wardle even called it the “worst” bug to everyday macOS users.

Fortunately, there have been no reported cases. It took a few weeks, but Apple eventually reconfigured its anti-virus app XProtect to detect any malware that could potentially exploit this vulnerability. Even systems that are running on older versions of macOS will get the XProtect patch, so it is recommended that Mac users update their systems to macOS 11.3 as soon as they can.

Apple’s security history

Unfortunately, this was not the first time a security bug was found on macOS. A few months ago, a common macOS Trojan called “Shlayer” managed to sneak into the App Store twice. Some hackers have even tried to find vulnerabilities in the M1 Processor, which is commonly found in MacBooks.

However, there are a few reasons why Mac desktops and MacBooks are more expensive than their competitors. One of them is how Apple products have superior security hardware and software support. Apple desktops, like the iMac 24 and iMac 27, are protected by their system’s sandboxed nature. This means that when malware is detected in the programs, the OS will automatically lock the malware away from the rest of the computer to prevent it from spreading. The same programs are available on modern MacBooks like the MacBook Air.

Then, the Apple security team would work on a patch to deal with the issue. Such was the case for this recent vulnerability.

As new technologies are made and hackers get smarter, it is inevitable that new vulnerabilities will be discovered in the future. But more than any tech company, Apple is a brand that will continue to prioritize the security of its users. There is always that assurance that even if a security bug arises, it will be patched straightaway.

This article is written by Nicholas Lyons.