New security layer for macOS targets admin errors before hackers
A design firm recently faced a cybersecurity scare while editing a campaign video on a MacBook Pro. The creative director opened a collaboration app that slyly requested access to the microphone an...
A design firm recently faced a cybersecurity scare while editing a campaign video on a MacBook Pro. The creative director opened a collaboration app that slyly requested access to the microphone and camera. Normally, macOS should flag this, but the checks were surprisingly lax, granting the app access anyway. Meanwhile, another Mac in the office had file sharing enabled through an outdated protocol called SMB version one, a known vulnerability that hackers can exploit in minutes if exposed online.
These misconfigurations are a common pitfall, even for security-conscious organizations. They aren't failures of hardware or antivirus software; they’re gaps in configuration that attackers love to exploit. Enter Defense Against Configurations (DAC), a new initiative aimed at tackling these oversights before hackers do. If you think your setup is secure, it might be worth a second look.
More insights from the team
Continue exploring adjacent research and threat briefings selected for their relevance to this topic.
U.S. Congressional Budget Office faces suspected cyberattack
The U.S. Congressional Budget Office is in hot water after a suspected foreign cyberattack breached its network. The CBO recently confirmed the incident, raising concerns about the potential exposu...
Researchers uncover vulnerabilities in ChatGPT that expose data
Hey there! If you’re a fan of ChatGPT, you might want to pay attention. Researchers just uncovered a bunch of vulnerabilities in OpenAI's latest models, GPT-4o and GPT-5. These issues could let att...
Gootloader malware resurfaces with new tactics after seven months
Gootloader malware is back in the game after a seven-month hiatus, and it’s got some new tricks up its sleeve. This sneaky malware loader is once again using SEO poisoning to push fake websites tha...