in ,

Apple Pays $100,500 Bounty to Hacker Who Found Way to Hack MacBook Webcam

Apple Pays 100500 Bounty to Hacker Who Found Way to Hack MacBook Webcam

Apple last year fixed a new set of macOS vulnerabilities that exposed Safari browser to attack, potentially allowing malicious actors to access users’ online accounts, microphone, and webcam.

Security researcher Ryan Pickren, who discovered and reported the bugs to the iPhone maker, was compensated with a $100,500 bug bounty, underscoring the severity of the issues.

By exploiting a chain of security issues with iCloud Sharing and Safari 15, it enables the attacker to hijack the multimedia permission and gain “full access to every website ever visited by the victim” in Safari, including Gmail, iCloud, Facebook, and PayPal accounts.

The issues specifically concern ShareBear, an iCloud file-sharing mechanism that prompts users upon attempting to open a shared document for the first time. Taking advantage of the fact that users are never displayed the prompt again once they accept to open the file, Pickren found that it’s possible to alter the file’s content to anything by anyone with access to the file.

“ShareBear will then download and update the file on the victim’s machine without any user interaction or notification,” Pickren explained in a technical write-up. “In essence, the victim has given the attacker permission to plant a polymorphic file onto their machine and the permission to remotely launch it at any moment.”

AVvXsEiH q vYI4O2tzg2ZnA6WlELQj5L3SnvGiS v6ZxFihFJrOaeY0dMTJIrfJrPO8YlOINtPrwEMkJZHddezk2wb320u9YO8CRHVQZMu9LO306WeJd7Rn5taFD3hyiNQVWBPG jnAEZabDEIxuYPHuvzVSQpsoKdsBScsctVZtZ 2rn o grMP0gFYR7

What do you think?

24 Points
Upvote Downvote

Written by Impressim

Impressim is a leading tech company, focusing on headphones, technology, buyers guide, products comparison, web development, and lifestyle.

Leave a Reply

Your email address will not be published. Required fields are marked *