Skip to main content
  1. Home
  2. Computing
  3. News

This vulnerability allowed hackers to access every aspect of your Mac

Add as a preferred source on Google

Apple just released an update for your Mac and MacBook that includes two important security fixes. The vulnerability is in MacOS Monterey and you need to have version 12.5.1 to keep your Mac safe from active exploits.

An active exploit is a computer security term that means this security flaw has already been found and used by hackers. While the full details of the vulnerabilities are being withheld to give people a chance to download the update, Apple did share some information about the issues.

Recommended Videos

MacOS Monterey 12.5 has a security flaw in its kernel, the core of the operating system, that might allow an application to execute arbitrary code with kernel privileges. That means an app could gain complete access to every aspect of your Mac. This has been identified as CVE-2022-32894.

The second vulnerability is in WebKit, the software a Mac uses to display websites. That means Safari and many other apps that use web content have the CVE-2022-32893 exploit. Details are also reserved on this active exploit or zero-day security flaw. Apple notes that maliciously crafted web content could lead to code execution.

It’s important to update your Mac as soon as possible. In the meantime, use caution when browsing and downloading apps. Apps and websites that you know and trust are fine, but save any exploration until you have installed MacOS 12.5.

Frequent security updates aren’t fun,but are necessary to keep your Mac and your data safe. A quick visit to System Preferences should show a red notification dot on the Software Update pane if you need to install the latest version.

Alan Truly
Alan Truly is a Writer at Digital Trends, covering computers, laptops, hardware, software, and accessories that stand out as…
US banks want to block AI agents from moving your money. Well, at least that’s one good move.
Letting a chatbot handle your finances sounds convenient until someone asks who pays for its mistakes.
ai-agents-on-phone

AI agents want to handle more of your life, including your money, but US banks are drawing a line when these AI assistants try to move funds on your behalf. Charles Schwab and JPMorgan Chase are now restricting outside AI agents from taking financial actions, citing security risks and unanswered questions about who takes responsibility when things go wrong.

Charles Schwab CEO Rick Wurster told Bloomberg that Schwab is actively blocking unauthorized AI agents, including Meta's Muse, from moving client money. JPMorgan Chase CEO Jamie Dimon made a similar call this week, so this isn't just one bank being cautious.

Read more
MapQuest can now show you the cameras keeping an eye on your commute
MapQuest is back, and now it’s exposing who’s watching your neighbourhood
Surveillance cameras

MapQuest has introduced a new surveillance layer that lets users see the reported locations of outdoor surveillance cameras and automated licence plate readers, including those operated by Flock Safety. The feature gives drivers and residents a clearer picture of the surveillance infrastructure around their neighbourhoods, at a time when law enforcement's use of these cameras is under growing scrutiny.

The new layer can be enabled through MapQuest’s Map Options menu, alongside existing options for traffic and incidents. It covers cameras from multiple manufacturers, including Motorola Solutions, Genetec, Axis Communications, Axon, Leonardo, Neology, Rekor, PlateSmart, Ubicquia and Verkada. The company has promoted the feature with the tagline “The Roads Have Eyes!”

Read more
OpenAI’s agent ran out of crypto while completing a task, so it stole from another wallet
When its test crypto ran dry, this AI agent went wallet shopping without asking first.
open ai logo on mac

Imagine asking your assistant to finish a task, only to find out it paid for it with someone else's money. That's basically what happened, according to OpenAI's incident report. The incident happened on June 26 and involved an internal research model from the GPT-5.6 Sol family.

Apparently, the AI agent ran out of cryptocurrency while trying to finish a coding task. So it completed the task in a way nobody approved.

Read more