Microsoft Finds macOS Bug That Lets Hackers Bypass SIP Root Restrictions

Sergiu Gatlan, *BleepingComputer, 30 May 2023 via ACM Tech News

Apple has patched a vulnerability discovered by Microsoft security
researchers, dubbed Migraine, that would have allowed attackers with root
privileges to install *undeleteable* malware and access the victim's private
data. The researchers said, “By focusing on system processes that are
signed by Apple and have the com.apple.rootless.install.heritable
entitlement, we found two child processes that could be tampered with to
gain arbitrary code execution in a security context that bypasses SIP …

access apple attackers bleepingcomputer bug bypass data hackers install macos malware may may 2023 microsoft microsoft security migraine private private data privileges processes researchers restrictions root security security researchers sergiu gatlan sip system tech victim vulnerability