Apple patched CVE-2024-54471, a macOS vulnerability that allowed NetAuthAgent to leak file server credentials and iCloud API tokens due to missing sender verification. Update to macOS 15.1, 14.7.1, or 13.7.1 to stay protected.

wts.dev/posts/password-leak/

#macOS #CyberSecurity #Apple #InfoSec

Leaking Passwords (and more!) on macOS | Watch This Space

A security research blog.

^{Watch This Space}