A serious gap revealing the passwords of Mac users in front of hackers

Security researcher Linus Hans has revealed a serious security breach in Apple's latest Mojave operating system for Mac computers, which allows Hacker to acquire the word storage database KeyChains password, as well as the secret database of user accounts, login information without password. A pass.

The researcher pointed out that in order to access the target secret database, the hacker had to install malware into a computer program that the victim's user had to download and install on his machine, and then get the l? program authorization and access to keyChains. All the passwords that are stored there.

The risk of this vulnerability, called KeySteal, is that its researcher has not informed Apple of its information or details or how to exploit it. Apple does not have a reward program for researchers who detect vulnerabilities in the Mac operating system. Unlike what is followed by the company with the vulnerabilities of the iOS operating system.

Apple took two weeks to complete a similar loophole discovered by famed security researcher Patrick Wardle, who then provided him with a detailed explanation of the information required on the go, so that Apple could analyze the problem. gap and resolve and update a software update protecting the confidentiality of user data.