Vulnerability Spotlight: A deep dive into macOS SMB server
Summary: Cisco Talos discovered multiple vulnerabilities in macOS's proprietary SmbX SMB server implementation, all on the post-authentication attack surface, that could allow an attacker to reveal sensitive information, bypass cryptographic checks, cause a denial of service, or execute arbitrary code on the targeted server. Talos worked with Apple on fixes, and Apple fixed TALOS-2021-1246 in Big Sur but not Catalina, where the research was conducted.
Key Takeaway: The flaws sit on the post-authentication surface, which lowers severity but leaves them readily exploitable in environments with advanced authentication mechanisms - and one fix landed in Big Sur while Catalina was left unpatched.
Read the original at Cisco Talos ↗
- Topics
- Endpoint & Network Security
- Related
- Adapting to AI penetration testing orchestrators: The Modern Security Model Cyber Risks · Nov 13, 2026Introducing Spend Management: Spending limits and alerts for Cloudflare Cyber Risks · Nov 13, 2026Choosing Que Paxa, an unusual consensus algorithm Cyber Risks · Nov 11, 2026