Apple MacOS hit with yet another critical system security issue

Apple has been held in high regard as a company that has always been focused on the security of its product offerings; however, a new kernel flaw was recently found within the company’s MacOS desktop operating system. The latest news comes just months after a critical security flaw was shown to bypass MacOS Mojave’s system security and a massive flaw allowed eavesdropping via Apple’s FaceTime videotelephony software. This time around, the problem is at the heart of MacOS — the XNU kernel.

XNU is the operating system kernel for MacOS that has been in use as far back as the mid-1990s — a kernel is the core computer program that allows for software to communicate with a device’s hardware. The most recent flaw was discovered by the Project Zero team at Google, which aims to identify deficiencies in consumer software. According to Google, they were able to take advantage of the kernel’s copy-on-write function; this allowed the team to modify data on a disk without the entire system being aware of the change.

When a flaw is discovered, Project Zero follows a procedure where it first presents an issue to the company responsible for the software, with a set deadline before the information is released to the general public. Project Zero made Apple aware of the flaw in November 2018; however, as of February 28th, Apple has yet to patch the issue. Ben Hawkes of Project Zero does note that Apple is “intending to resolve the issue in a future release, and we’re working together to assess the options for a patch.”

Google’s Project Zero is a team of industry recognized security professionals, including Jann Horn, the researcher who was critical to the discovery of both the Meltdown and Spectre vulnerabilities affecting both Intel and ARM-based processors. In regards to Apple’s problem with the MacOS XNU kernel, the team at Google has introduced a concept code solution for the challenge. The kernel of an operating system is central to all processes, and it is possible that Apple is approaching the issue with great tact, albeit a bit slow for its users. For the utmost security, be sure to always keep your copy of MacOS up to date.

Emerging Tech

Google wants to map the world's air quality. Here's how.

For the past several years, a growing number of Google’s Street View cars have been doing more than just taking photos. They’ve also been measuring air quality. Here's why that's so important.
Computing

Zombieload forces a choice between performance and security. What will you do?

Intel has handled the recent discovery of a security vulnerability in its CPUs with confidence, a contrast to its reaction to Spectre and Meltdown. But with ZombieLoad, performance and security seem to be at odds, and you have to choose.
Computing

Windows on a Chromebook is a dead dream, but something better could replace it

Recent code updates posted in Chromium Gerrit indicate that Google has canceled Project Campfire, ending its plans to let Chromebooks dual boot Windows and Chrome OS. Is hope all but lost on this popular feature?
Computing

ZombieLoad is Meltdown resurrected. Here’s how to secure your PC right now

This year's follow up to Intel's Meltdown and Spectre chipocalypse is the new MDS attack. Four distinct attack methods have been uncovered that could leave your data exposed, but thankfully patches are already available.
Product Review

Microsoft’s Surface Laptop 2 launched last year, but already feels old

Released in fall of 2018, the Surface Laptop 2 was competitive at the time but now must deal with new competitors that were announced at CES 2019. How does the popular Surface Laptop 2 hold up six months later?
Computing

Cybercrime gang that stole $100M busted in international effort

A major cybercrime gang that used powerful malware to steal an estimated $100 million from bank accounts has been dismantled following an international effort that spanned six countries.
Product Review

Looking for discrete graphics on the cheap? The Acer Swift 3 will do the trick

The Acer Swift 3 is a tweener laptop that’s not quite budget and not quite premium – and it feels and performs accordingly. It manages to hold its own, though, thanks to its discrete GPU.
Computing

G-Sync is a game-changer. These are the best monitors with Nvidia's display tech

Looking for a monitor that plays well with Nvidia GPUs? You need G-Sync and we have picked the best G-Sync monitors available. Take a look and find out which monitor works best for your PC upgrade.
Computing

Microsoft is discounting this Surface Laptop 2 by a sweet $300

Microsoft is offering a nearly 14-inch Surface Laptop 2 with 256GB of storage at a $300 discount until May 18, 2019. The laptop comes with a PixelSense display, and Intel Core i5 processor and a 720p HD camera.
Computing

The Razer Core X Chroma is the best external GPU you can buy

The third entry in Razer's lineup of external graphics card enclosures, the Core X Chroma, brings together the best of its previous options in a single package. With RGB lighting and extra USB ports, is this the best you can buy?
Computing

Google recalls Titan Security Key due to hijack risk

Google is offering a free replacement for the Bluetooth Low Energy version of the Titan Security Key. A misconfiguration was discovered in the device, though hackers looking to exploit the vulnerability will find it difficult to do so.
Computing

Whether you want to edit, sign, or append, PDFs, these are the best PDF editors

While there are plenty of PDF editor options online, finding a solution with the tools you need can be tough. Here are the best PDF editors for your editing needs, no matter your budget or operating system.
Computing

Give your PC a new lease on life by upgrading its core components

Older PCs can still be great tools for work and play, they just need a little upgrade now and then. Here are the best upgrades you can make to your PC to make it feel fresh and fast once again.
Emerging Tech

Awesome Tech You Can’t Buy Yet: Insect drones and kinetic sculpture robots

Check out our roundup of the best new crowdfunding projects and product announcements that hit the web this week. You may not be able to buy this stuff yet, but it's fun to gawk!