Security researchers discovered an unusual malware campaign targeting Mac computers that gets around the security mechanisms built into macOS Catalina. The devious scheme recently added to Mac malware makers’ genre allows harmful code to bypass Apple’s app notarization process. This security routine has been a part of the Gatekeeper feature since the October 2019 release of macOS Catalina 10.15. It raised the entry bar for suspicious software by displaying a popup alert whenever a user tries to execute an unverified program.

Whereas using a VPN used to be an exotic prerogative of privacy addicts, it has turned into a normal habit that keeps all things Internet secured from undesirable tampering. It comes as no surprise that the Global Protect VPN app for Mac is gaining traction, especially in business circles. However, this tool is known to have been exposed to several exploitation scenarios in the not-so-distant past, so some users may want to get rid of it.

Apple is up to enhancing its users’ authentication practices by releasing a list of password criteria for developers and password management services. The new initiative codenamed the “Password Manager Resources” project aims to create a roadmap for the parties involved in masterminding and implementing secure login procedures. Coders and providers of password management applications shape up the primary audience of this groundbreaking move.

Browser preferences are among the fundamentals of regular computer use, being nifty shortcuts to personalize one’s Internet experience. This convenience works flawlessly until a piece of malware shows up. The category of harmful code called adware is the one to blame for tweaking victims’ web navigation defaults, as is the case with the Yahoo redirect virus on Mac. This article explains the mechanics of said attack vector.

A developer earns a bug bounty reward for reporting a Sign in with Apple zero-day vulnerability that could allow a hacker to access users’ online accounts. When the “Sign in with Apple” service debuted in June 2019, it was praised for being a highly private way to authenticate with websites and applications. According to the company’s announcement made at last year’s Worldwide Developers Conference (WWDC) event, it was supposed to become a decent alternative to long-standing counterparts backed by Google and Facebook.

Apple has issued email advisories covering 11 security flaws in its software and hardware products, with the fixes being available through the latest updates. The remedying roll-outs of Apple’s operating system versions for both desktop and mobile devices came in quick succession after these security alerts reached the general public. Patches are always welcome, especially if they are deployed proactively so that cybercriminals get hardly any chance to exploit weaknesses.