macOS Sequoia flaw could have exposed Keychain data including passwords

A newly disclosed macOS flaw could have allowed an attacker to decrypt Keychain data without a password. Here's how it worked, before it was patched.


Apple is known for its strong emphasis on security and privacy. However, a flaw in macOS Sequoia 15.0 allowed attackers to bypass these protections.

At Nullcon Berlin 2025, security researcher Koh M. Nakagawa from FFRI Security disclosed the issue. He found that Apple's gcore debugging utility was granted a system-level entitlement, compromising essential security boundaries.


Continue Reading on AppleInsider | Discuss on our Forums