Apple blocks web certificates that could be used by scammers, but Mac vulnerability remains
Apple has taken action to block eight compromised web security certificates that could have enabled attackers to impersonate legitimate websites. However, a cryptography expert has raised a critical concern: macOS systems may continue to trust these certificates because the operating system does not implement certificate revocation checking. This vulnerability could leave Mac users exposed despite Apple's certificate blocking action.
Key points
- Apple blocked eight compromised web security certificates
- Certificates could have been exploited to impersonate legitimate websites
- macOS may continue trusting revoked certificates due to missing revocation checks
- Vulnerability exposes potential security gap in macOS certificate validation
Summary and key points written by AI from the headline and a short excerpt, so they can be incomplete or wrong. 9to5Mac did the reporting; read the original for the full story.
Read the full story at 9to5Mac
