⤷ Title: macOS Privilege Escalation Flaw Bypasses Patch for Root Access, Poc Releases!
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 02:59:46 +0000
════════════════════════
⌗ Tags: #Vulnerability #.zprofile #Bypass #LPE #macOS #PackageKit #privilege escalation #Zsh
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Tue, 09 Dec 2025 02:59:46 +0000
════════════════════════
⌗ Tags: #Vulnerability #.zprofile #Bypass #LPE #macOS #PackageKit #privilege escalation #Zsh
Daily CyberSecurity
macOS Privilege Escalation Flaw Bypasses Patch for Root Access, Poc Releases!
A High-severity flaw in macOS PackageKit bypasses a previous fix. Exploiting the user's .zprofile file allows a local attacker to easily gain root privileges.
⤷ Title: Malicious VeloraDEX SDK Compromises Developer Machines via npm
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 01:58:56 +0000
════════════════════════
⌗ Tags: #Malware #@velora_dex/sdk #C2 #Credential Theft #cybersecurity #infosec #macOS Malware #Malware Analysis #Node.js #npm #StepSecurity #supply chain attack #zsh.profiler
════════════════════════
𐀪 Author: Ddos
════════════════════════
ⴵ Time: Wed, 08 Apr 2026 01:58:56 +0000
════════════════════════
⌗ Tags: #Malware #@velora_dex/sdk #C2 #Credential Theft #cybersecurity #infosec #macOS Malware #Malware Analysis #Node.js #npm #StepSecurity #supply chain attack #zsh.profiler
Daily CyberSecurity
Malicious VeloraDEX SDK Compromises Developer Machines via npm
A malicious update to @velora-dex/sdk (v9.4.1) drops a stealthy macOS backdoor on import. Learn how to detect the zsh.profiler infection and rotate secrets.