Researcher gives Apple details of macOS Keychain security flaw despite lack of macOS bug bounties

[cfsp key=”getamac.jpg”]”A German teenager who discovered a macOS Keychain security flaw last month has now shared the details with Apple, after having initially refused to hand them over because of the company’s lack of a bug bounty program for the Mac,” Tim Hardwick reports for MacRumors.

“Eighteen-year-old Linus Henze dubbed the zero-day macOS vulnerability he found ‘KeySteal,’ which, as…

Security researcher reveals macOS exploit to access Keychain passwords, refuses to share with Apple (plus: how to secure your Keychain)

[cfsp key=”getamac.jpg”]”Security researcher Linuz Henze has shared a video demonstration of what is claimed to be a macOS Mojave exploit to access passwords stored in the Keychain,” Benjamin Mayo reports for 9to5Mac. “However, he has said he is not sharing his findings with Apple out of protest.”

“Henze has publicly shared legitimate iOS vulnerabilities in the past, so he has a track record of…