Ancient unpatched IOHIDeous vulnerability allows root access to macOS

Apple has a tendency to pride itself on security, but a researcher has released details of a macOS vulnerability that allows for complete system control by an unprivileged user. A self-described "hobbyist hacker," Siguza, has published details of the exploit which is thought to have existed, undetected and unpatched for at least a decade. As well as details of the security flaw, Suguza has also published proof-of-concept code for the IOHIDeous vulnerability on GitHub. In a highly-detailed write-up, Siguza says that the bug has been present for at least 15 years, but suggests it is possible that it has been… [Continue Reading]