Skip to main content
  1. Home
  2. Computing
  3. News

This vulnerability allowed hackers to access every aspect of your Mac

Add as a preferred source on Google

Apple just released an update for your Mac and MacBook that includes two important security fixes. The vulnerability is in MacOS Monterey and you need to have version 12.5.1 to keep your Mac safe from active exploits.

An active exploit is a computer security term that means this security flaw has already been found and used by hackers. While the full details of the vulnerabilities are being withheld to give people a chance to download the update, Apple did share some information about the issues.

Recommended Videos

MacOS Monterey 12.5 has a security flaw in its kernel, the core of the operating system, that might allow an application to execute arbitrary code with kernel privileges. That means an app could gain complete access to every aspect of your Mac. This has been identified as CVE-2022-32894.

The second vulnerability is in WebKit, the software a Mac uses to display websites. That means Safari and many other apps that use web content have the CVE-2022-32893 exploit. Details are also reserved on this active exploit or zero-day security flaw. Apple notes that maliciously crafted web content could lead to code execution.

It’s important to update your Mac as soon as possible. In the meantime, use caution when browsing and downloading apps. Apps and websites that you know and trust are fine, but save any exploration until you have installed MacOS 12.5.

Frequent security updates aren’t fun,but are necessary to keep your Mac and your data safe. A quick visit to System Preferences should show a red notification dot on the Software Update pane if you need to install the latest version.

Alan Truly
Alan Truly is a Writer at Digital Trends, covering computers, laptops, hardware, software, and accessories that stand out as…
This app turns the iPhone Duo into a pocket-sized Mac
Headroom uses macOS's built-in Screen Sharing to let users control their Mac from the foldable iPhone, without installing additional software on the computer.
Headroom App on Apple iPhone Duo controlling a Mac

The iPhone Duo has barely been out for a day, and someone's already found a way to run their Mac on it. Well, sort of. Headroom, a remote desktop app from MusicFlow, lets users control their Mac from Apple's new foldable phone, with an interface that adapts as the device opens, closes, and folds in half. Think of it as turning a pocket-sized phone into a miniature MacBook, minus the actual MacBook.

Headroom turns the iPhone Duo into a mini Mac

Read more
AI helped uncover a hidden PHP flaw. Now websites worldwide are facing millions of hacking attempts.
A critical PHP vulnerability has websites worldwide racing to install security patches.
php-flaw-websites-under-attack

PHP is the programming language behind roughly 70% of websites, and it just ran into a serious problem. Security researchers used AI to uncover a critical flaw called PHP2Shell, which could let attackers take over web servers, steal data, or disrupt online services. Since the discovery, websites worldwide have been hit with millions of attempts to exploit it.

Hackers moved fast once the flaw went public. Cloudflare CEO Matthew Prince said the attack attempts jumped from tens of thousands within 45 minutes to millions overnight, The Guardian reports.

Read more
Microsoft has begun rolling out Copilot Code for building apps with natural language
The workplace-focused vibe coding tool can pull context from emails, documents, meetings, and chats.
Microsoft Copilot code logo

Microsoft introduced Code last month as one of the three core parts of its revamped Copilot app. The app was pitched as an easy-to-use coding agent that lets users describe what they want to build in natural language, like an app, a tracker, a dashboard, an automation, or a workflow, and Copilot would build it for them.

Essentially, it's a workplace-focused vibe-coding app that turns existing work into a functional app, and Microsoft has begun rolling it out through the Frontier program.

Read more