In keeping with a report by Assist Internet Safety, a safety researcher discovered a vulnerability in macOS Sequoia whereas utilizing a utility created by Microsoft. When uncovered, the vulnerability might permit an assault to bypass macOS’s System Integrity Safety and skim the reminiscence of any course of.
FFRI Safety’s Koh Nakagawa made the discover whereas utilizing ProcDump for Mac, a utility by Microsoft that performs course of crash dumps so builders can monitor CPU and reminiscence utilization. Throughout a presentation at Nullcon Berlin, Nakagawa mentioned he initially thought that the Mac’s SIP would stop ProDump from being a useful gizmo, however then found that the device calls upon a particular entitlement granted to a macOS element known as gcore.
Nakagawa discovered that gcore dumps reminiscence from any course of, and that reminiscence dump contains keychain info. He was capable of finding the important thing used to encrypt keychain and use that info to decrypt the keychain while not having a person password.
The vulnerability was recorded as CVE-2025-24204 within the Nationwide Vulnerability Database. Apple addressed the exploit within the macOS Sequoia 15.3 replace in January. It’s customary for researchers to current their findings after the vulnerability has been fastened.
Apple releases safety patches via OS updates, so putting in them as quickly as potential is vital. Macworld has a number of guides to assist, together with a information on whether or not or not you want antivirus software program, a record of Mac viruses, malware, and trojans, and a comparability of Mac safety software program.