Well this isn't good. A bug in Apple macOS High Sierra can Painful Man And Womanlet anyone gain admin access to a Mac. To make matters worse, once that access has been gained, an attacker can later log back into the locked device anytime.
Published to Twitter on Tuesday by software engineer Lemi Orhan Ergin, the vulnerability is alarmingly straightforward. The flaw allows someone to create a kind of phantom profile, one that can log into the Mac with admin access, but it won't show up on a real admin account.
Once the phantom account is created, a user simply needs to enter "root" as a username and, without entering a password, hit enter to unlock. Importantly, the hacker first has to have access to a unlocked computer to be able to pull this off. But still, it's bad.
Mashable confirmed this security flaw exists on macOS High Sierra 10.13.0.
This Tweet is currently unavailable. It might be loading or has been removed.
This Tweet is currently unavailable. It might be loading or has been removed.
Anyone looking to exploit the flaw would in most cases first need physical access to the machine while an admin is logged in. They would only need access for a few seconds, though, and then could return anytime to log in as an admin.
However, should a vulnerable machine also happen to have screen sharing turned on, it is reportedly remotely vulnerable as well.
This Tweet is currently unavailable. It might be loading or has been removed.
This Tweet is currently unavailable. It might be loading or has been removed.
"We are working on a software update to address this issue," explained Apple when reached for comment. "In the meantime, setting a root password prevents unauthorized access to your Mac."
Instructions to do so can be found on an Apple support page.
This story has been updated with information about remote exploitation, as well as a statement from Apple.
Topics Apple Cybersecurity
The Amazon Book Sale is coming April 23 through 28
Google drones will deliver meatballs and other groceries in this lucky city
How 'Superstore' pulled off that shocking finale: Interview
Facebook data reportedly helps companies guess your credit score
Best IPL deal: Save $80 on Braun IPL Silk·Expert
BTS hark back to The Beatles in their performance for 'The Late Show'
The book inspiration for Arya's final journey in 'Game of Thrones'
Airbnb relents, will limit how long people can rent out properties in two major cities
Amazon Spring Sale 2025: Best deals on cleaning supplies
Friendly deer greets a hunter in the woods and demands to be pet
Google's officially retiring Assistant
TikTok owner ByteDance launches new messaging app, FlipChat
Microsoft: Patch old Windows systems or risk computer worm
These islands are the dumpster for humanity’s plastic addiction
Stablecoin bill advances in U.S. Senate as Trump critics call to end his crypto dealings
Huawei's founder says the company is well
The (former) Most Interesting Man is now selling wi
Snapchat's 'gender
Best speaker deal: Save $30 on the JBL Clip 5
Europol takes down hackers who stole $100 million using GozNym malware
Magic Johnson reveals the truth about LaVar Ball that we've suspected all alongGame of Thrones Season 7 could give us an Arya/Nymeria reunion at lastWhy is everyone so worried about Snap Maps when Venmo is the OG creeper?Researchers create software that converts nonTrueFace.AI busts facial recognition impostersAngry guy flings his powerbank on the ground in the airport, causing it to explodeA 'Game of Thrones' exhibition is on its way to youRamen teams up with Pringles to create the ultimate college chipAngela Merkel is the hero Donald Trump haters needMargaret Atwood wants Drake to cameo in 'The Handmaid’s Tale.'Walmart is rolling out giant vending machines for online pickup ordersWonderful 90Star Trek vs. Star Wars fight leads to roommate brawlThis amazing 'Game of Thrones' infographic shows all the betrayals over six seasonsWorld's most expensive fidget spinnerWatch a bear play in an Alaskan waterfall right from Google Earth'Hearthstone' gets all cold and deadly this AugustWatermelon dresses are the only hot new summer fad that won't annoy youWatch a bear play in an Alaskan waterfall right from Google EarthPorsche and AOC's sleek new monitor is absolutely beautiful Jennifer Lopez's jean boots prove that no one can be trusted with denim Mozilla is redesigning its logo to represent its diverse products Photoshopping the Norman Reedus 'Death Stranding' trailer became a sport during E3 week Creative Photoshoppers make damaged lawn seem interesting Aide who saved Gabrielle Giffords' life speaks out about Jo Cox's murder Solar flares severed radio communication during 2017 hurricane season 'Avengers' There may be a better way to find would Take a mental swim with these live marine life cams RED's holographic Hydrogen phone gets a little more real Ransomware attack absolutely wrecks Alaskan town's IT infrastructure The tiny online community celebrating your old point San Francisco stages a kiss Terminator sequel photo shows us Sarah Connor and maybe a hint or two You're not being rickrolled: Rick Astley just hit number one in the UK Our first look at the DJI Mavic 2 is here Tesla's still losing money, but at least Musk isn't losing it on earnings calls Massive study finds nearly no increase to diversity in popular films Bring Thandie Newton back to 'Mission: Impossible,' you cowards Murdered British politician Jo Cox celebrated immigration and diversity in first speech
1.3683s , 8202.640625 kb
Copyright © 2025 Powered by 【Painful Man And Woman】,Inspiration Information Network