Hack The Sec-Leading Resource Of Linux Tutorial

Thunderstrike 2: World's First Firmware Worm That Infects Mac Computers Without Detection Tuesday

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 align="justify" class="post-title url" itemprop="headline name" style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: inherit; font-stretch: inherit; font-weight: inherit; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<a class="url entry-title" href="http://www.hackthesec.co.in/2015/08/thunderstrike-2-worlds-first-firmware.html" itemprop="url" rel="bookmark" style="border: 0px; color: #3d5a99; display: block; font-family: inherit; font-size: 28px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-align: left; vertical-align: baseline;">Thunderstrike 2: World's First Firmware Worm That Infects Mac Computers Without Detection</a></h1>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
If you think Apple’s Mac computers are much more secure than Windows-powered systems, you need to think again. This isn’t true, and security researchers have finally proved it.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Two security researchers have developed a proof-of-concept computer worm for the first time that can spread automatically between MacBooks, without any need for them to be networked.</div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOrL5YIvo-O_u_GcOnXvPsi2jfqQFSAXVR_1WUWU3-4evxHLw3045RLte9KFHdkbDdcE1WEmfW2WUPirNZ0oKRA2X0KuKEFiij8D36KEMh5ypEv5u0TI8wYntfOtTj6y4mXN3_1oqVjLM-/s1600/Thunderbolt-Thunderbolt-malware-bug.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiOrL5YIvo-O_u_GcOnXvPsi2jfqQFSAXVR_1WUWU3-4evxHLw3045RLte9KFHdkbDdcE1WEmfW2WUPirNZ0oKRA2X0KuKEFiij8D36KEMh5ypEv5u0TI8wYntfOtTj6y4mXN3_1oqVjLM-/s1600/Thunderbolt-Thunderbolt-malware-bug.jpg" /></a></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Dubbed <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><u style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Thunderstrike 2</u></b>, the new proof-of-concept firmware attack is inspired by previously developed proof-of-concept firmware called Thunderstrike.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Thunderstrike Attack, developed by security engineer Trammell Hudson, actually took advantage of a<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">vulnerability in Thunderbolt Option ROM</i></b> that could be used to infect <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Apple Extensible Firmware Interface (EFI)</i> by allocating a malicious code into the boot ROM of an Apple computer through infected Thunderbolt devices.<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<h3 style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Thunderstrike 2 Spreads Remotely</h3>
</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" />Although the original Thunderstrike required an attacker to have physical access to your Mac computer to work, the new attack can be spread remotely.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Thunderstrike 2 can be delivered via phishing emails, malicious Web site, as well as through a peripheral connected to the Ethernet port or USB.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
After downloaded on a computer, Thunderstrike 2 can infect Thunderbolt-connected accessories that use Option ROM. After that, the malware can automatically spread to any Mac that you plug the accessory into.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Thunderstrike 2 is developed by two security researcher Trammell Hudson and Xeno Kovah of firmware security consultancy Legbacore. The researchers also demonstrated their attack, which you can watch in the video given below.<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<h3 style="border: 0px; font-family: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
 Infects Mac Computers Without Detection</h3>
<div style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Given the vicious worm, Thunderstrike 2, targets and lives in the firmware and can even evade a whole system reboot, it’s a real pain for the Mac users.</div>
<blockquote style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;">
"<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Thunderstrike 2 is really hard to detect, it’s really hard to get rid of, and it’s really hard to protect against something that’s running inside the firmware,</i>" Kovah <a href="http://www.wired.com/2015/08/researchers-create-first-firmware-worm-attacks-macs/" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; vertical-align: baseline;" target="_blank">told</a> Wired.</blockquote>
<blockquote style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;">
"<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">For most users that’s really a throw-your-machine-away kind of situation. Most people and organizations don’t have the wherewithal to physically open up their machine and electrically reprogram the chip.</i>"</blockquote>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Many of the firmware vulnerabilities discovered by the researchers to develop Thunderstrike 2 are common to most EFI firmware. A total of six vulnerabilities affected PCs from Dell, HP, Lenovo, Samsung, and others.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Five firmware vulnerabilities also affected the Mac's firmware, and of those, Apple has fully patched one flaw, partially patched another, and failed to patch the rests.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The researchers plan to present their findings at the <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Black Hat</i> and <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Def Con security conferences</i> in Las Vegas this week.</div>
</div>
</div>

Thunderstrike 2: World's First Firmware Worm That Infects Mac Computers Without Detection Tuesday

Thunderstrike 2: World's First Firmware Worm That Infects Mac Computers Without Detection If you think Apple’s Mac computers are muc...

Unpatched Mac OS X Zero-day Bug Allows Root Access Without Password Tuesday

<div dir="ltr" style="text-align: left;" trbidi="on">
<h1 align="justify" class="post-title url" itemprop="headline name" style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: inherit; font-stretch: inherit; font-weight: inherit; line-height: 15px; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<a class="url entry-title" href="http://www.hackthesec.co.in/" itemprop="url" rel="bookmark" style="border: 0px; color: #3d5a99; display: block; font-family: inherit; font-size: 28px; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: 48px; margin: 0px; outline: 0px; padding: 3px 10px; text-align: left; text-decoration: none; vertical-align: baseline;">Unpatched Mac OS X Zero-day Bug Allows Root Access Without Password</a></h1>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
Hackers have their hands on something of your concern. A severe zero-day vulnerability in the latest, fully patched version of Apple's Mac OS X is reportedly being exploited in the wild by the hackers.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
The vulnerability could allow attackers to install malware and adware onto a target Mac, running OS X 10.10 (Yosemite) operating system, <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">without requiring victims to enter system passwords</i></b>, a new report says.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div class="separator" style="clear: both; text-align: center;">
<a href="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjsBVlOYLMKaxy8UpuzuV4DkVXvT27G9-k-c1fvQu5tGRw7iHDO9CIoCxCnAVEKrEkGzTrEKKdC2oiJnbplaXPAvYfi8oAq-LsqVx18xk-DAWE98fm5tfCN6XCg-0bgc9vyaU1MU2IRvdOV/s1600/hacking-mac-os-x-root-password.jpg" imageanchor="1" style="margin-left: 1em; margin-right: 1em;"><img border="0" src="https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjsBVlOYLMKaxy8UpuzuV4DkVXvT27G9-k-c1fvQu5tGRw7iHDO9CIoCxCnAVEKrEkGzTrEKKdC2oiJnbplaXPAvYfi8oAq-LsqVx18xk-DAWE98fm5tfCN6XCg-0bgc9vyaU1MU2IRvdOV/s1600/hacking-mac-os-x-root-password.jpg" /></a></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
The zero-day bug came over a week after security researcher Stefan Esser discovered a privilege escalation zero-day vulnerability in the latest version of Apple's OS X Yosemite that caused due to environment variable <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">DYLD_PRINT_TO_FILE</i></b> and <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">dynamic linker dyld</i></b>, new error-logging features added to the operating system.</div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<br /></div>
<div style="background-color: white; border: 0px; font-family: 'Open Sans', arial, sans-serif; font-size: 15px; font-stretch: inherit; line-height: 35px; margin: 0px; outline: 0px; padding: 0px; text-align: justify; vertical-align: baseline;">
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The developers failed to implement standard safeguards that are needed while adding support for new environment variables to the OS X dynamic linker dyld, allowing hackers to create or modify files with root privileges that can fit anywhere in the Mac OS X file system.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
OS X Zero-Day Exploit in the Wild</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Now, security researchers from anti-malware firm Malwarebytes spotted a malicious installer in the wild that was exploiting the zero-day vulnerability to infect Macs with different types of adware including<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: italic; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">VSearch, MacKeeper</b> and<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: italic; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"> Genieo</b>.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The issue actually resides in a hidden Unix file – <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Sudoers </b>– which is actually a list of files as to which software are allowed to get root permissions on a computer. However, a modification to the Sudoers allowed the installer to gain root level permissions without the need of password from an administrator.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The issue was discovered by <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">Adam Thomas</i> while testing a new adware installer.</div>
<blockquote class="tr_bq" style="background-color: #f9f9f9; border-left-color: rgb(191, 202, 218); border-left-style: solid; border-width: 0px 0px 0px 8px; font-stretch: inherit; margin: 10px; outline: 0px; padding: 10px; quotes: none; vertical-align: baseline;">
<i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"The script that exploits the DYLD_PRINT_TO_FILE vulnerability is written to a file and then executed,"</i> Malwarebytes researchers explains in a <a href="https://blog.malwarebytes.org/mac/2015/08/dyld_print_to_file-exploit-found-in-the-wild/" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; vertical-align: baseline;" target="_blank">blog post</a>. <i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">"Part of the script involves deleting itself when it's finished."<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" />"The real meat of the script, though, involves modifying the Sudoers file. The change made by the script allows shell commands to be executed as root using sudo, without the usual requirement for entering a password."</i></blockquote>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<h3 style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
No Way Out for Mac Users</h3>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
The zero-day flaw <b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">affects both the current stable Mac version OS X 10.10</i></b> (build 10.10.4) and the<b style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;"><i style="border: 0px; font-family: inherit; font-size: inherit; font-stretch: inherit; font-variant: inherit; font-weight: inherit; line-height: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">recent Beta build OS X 10.10.5</i></b> (Yosemite).</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Good news for Mac users who are running Mac OS X 10.11 El Capitan Beta builds, as it appears that they are not affected by the zero-day flaw.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
Until Apple patches this critical issue, you don't have any good options to prevent a skilled hacker from installing malware on your Mac systems, beyond using a patch created by Esser himself, which can be downloaded from <a href="https://github.com/sektioneins/SUIDGuard" rel="nofollow" style="border: 0px; color: #3d5a99; font-family: inherit; font-size: inherit; font-stretch: inherit; font-style: inherit; font-variant: inherit; font-weight: bold; line-height: inherit; margin: 0px; outline: none; padding: 0px; vertical-align: baseline;" target="_blank">here</a>.</div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
<br style="content: " "; display: block; margin: 20px 0px 0px; outline: 0px; padding: 0px;" /></div>
<div style="border: 0px; font-stretch: inherit; margin: 0px; outline: 0px; padding: 0px; vertical-align: baseline;">
No doubt, Esser is a respected security researcher, but installing a patch from a third party developer can be a risky. Therefore, we advise you to fully investigate the patch before installing.</div>
</div>
</div>