Title: So the CVE-2020-11470 is back.<p>“This effectively disables code signature verification for its dynamic libraries and enables a code injection attack that Wardle calls &quot;dylib proxying&quot;. It&#x27;s not clear why Zoom uses this exception since its own libraries appear to be properly signed.”<p><a href="https:&#x2F;&#x2F;www.csoonline.com&#x2F;article&#x2F;3535789&#x2F;weakness-in-zoom-for-macos-allows-local-attackers-to-hijack-camera-and-microphone.amp.html" rel="nofollow">https:&#x2F;&#x2F;www.csoonline.com&#x2F;article&#x2F;3535789&#x2F;weakness-in-zoom-f...</a><p>Check latest pkg with Suspicious Package [0] analyzer.<p>[0] <a href="https:&#x2F;&#x2F;www.mothersruin.com&#x2F;software&#x2F;SuspiciousPackage&#x2F;" rel="nofollow">https:&#x2F;&#x2F;www.mothersruin.com&#x2F;software&#x2F;SuspiciousPackage&#x2F;</a>
Upvote: