Google Reveals \"BuggyCow,\" a Rare MacOS Zero-Day Vulnerability
Companies, agencies, institutions, etc
Google
Apple
CoW
NSA
Rendition Infosec
TSA
BuggyCow
MalwareBytes
Facebook
Microsoft
FaceTime
up."They've
QA
CNMN Collection
Nast
Condé Nast
People
Williams
MacOS
Jake Williams
Rube Goldberg
this."Thomas Reed
Zero
Groups
No matching tags
Physical locations
No matching tags
Places
Mountain View's
California Privacy Rights
Locations
No matching tags
Events
Project Zero
Summary
So like clockwork, 94 days after Google alerted Apple to a bug in its MacOS operating system that could allow malware to inject data into the most privileged code running on its computers, Mountain View's hackers are revealing that fresh zero-day vulnerability to the world.On Friday, Google's Project Zero researchers quietly published a forum post outlining a previously unknown vulnerability in MacOS, which they call BuggyCow, in a piece of proof-of-concept demonstration code. And while BuggyCow would allow that malware to potentially mess with the inner workings of higher-privileged parts of the computer, it could do so only if it found a highly privileged program that kept its sensitive data on the hard drive rather than memory.In typically cryptic fashion, Google's Project Zero team didn't respond to WIRED's request for comment.
As said here by Andy Greenberg