CZ’s Urgent Warning
Former Binance CEO Changpeng ‘CZ’ Zhao warned the crypto community on November 19 of an important exploit directed at Intel-based Macs. The executive noted that updating systems was an urgent need to protect sensitive data and digital assets.
“If you use a MacBook with an Intel-based chip, update asap!” warned Zhao, who warned users that this exploit also affects iPhones and iPads.
Understanding the Exploit
The said bugs were identified as CVE-2024-44308 and CVE-2024-44309, in JavaScriptCore and WebKit components, respectively, in macOS Sequoia. Hence, the zero-day exploits lead to CSS’s allowing hackers to run malicious code, hijack sessions, and steal data.
Apple has just released emergency patches to fix these actively exploited vulnerabilities. Users are strongly recommended to update their devices immediately.
Crypto Hackers Exploit Security Gaps
Hackers often exploit vulnerabilities to target crypto users, using phishing scams, malware injections, and wallet credential theft to steal assets. One vulnerability was linked to cookie management issues, which Apple resolved with updated state management protocols.
The exploit’s active use highlights the increasing sophistication of cyberattacks targeting the crypto community.
State-Sponsored Threats?
The bugs were uncovered by Google’s Threat Analysis Group, which has traditionally tracked state-backed cyberattacks. Apple is not documenting the extent of the damage, but speculation runs high about possible government-backed actors.
Apple’s Tough Year
Apple’s reputation for robust security has been questioned repeatedly in 2024. Among other incidents:
- November 12: North Korean hackers using crypto malware against macOS users.
- April: A zero-day exploit of iMessage let attackers access iPhones without user interaction.
- March: Researchers made a discovery of the M-series chip flaw that allows cryptographic keys to be exposed in CPU caches.
Meanwhile, malicious apps masquerading as crypto firms bypassed the defenses and found themselves in the App Store, which also installed software used to steal digital assets.
Takeaway for Crypto Users
This latest exploit underlines the need for vigilance that’s essential in the crypto space. Intel Mac and iPhone users are advised to install immediate updates in order to mitigate the risks. Given the evolving nature of hackers’ tactics, proactive security measures are needed now more than ever.
