Apple customers discover major security flaw in latest Macs
Apple customers have found a major bug in the latest version of the company's operating system, macOS High Sierra, for their laptops and desktops. A Turkish developer discovered that anyone could gain administrator privileges on Macs running the operating system without a password, making private user data extremely vulnerable. Apple said in a statement to Quartz that it is currently working to fix the issue.

If you have an Apple computer running the latest version of the company’s software, macOS High Sierra, be warned: It might be possible for someone to quite easily get into your computer without your login credentials.

Without explaining what the actual bug is (we don’t want to make it any easier for potential hackers than this already is, and you can find it on Twitter pretty easily), someone can login to a Mac by typing a word in the login field, leaving the password field blank, and attempting to log in several times. Eventually the system will let you in with full access, according to security researchers.

Advertisement

You can also use this same flaw to access System Preferences on a computer whose settings you don’t have access to. Quartz wasn’t able to recreate the login bug, but was able to edit who has access to a computer in System Preferences on a Mac running macOS High Sierra 10.13.1.

Apple is aware of the bug, and sent Quartz the following statement on how to patch the login flaw for now: