MICROSOFT: MACOS BUG LETS HACKERS INSTALL MALICIOUS KERNEL DRIVERS

Summary from the TLDR InfoSec newsletter

Apple patched a macOS vulnerability that allowed hackers to bypass System Integrity Protection and install malicious kernel drivers by exploiting a flaw in the Storage Kit daemon. This flaw, designated as CVE-2024-44243, could be abused by local attackers with root privileges to compromise Mac systems without physical access, potentially leading to the installation of persistent malware and data theft. Microsoft emphasized the importance of SIP in protecting macOS systems and highlighted the need for robust security solutions to detect and prevent such threats.