mSCP jamf scripts
Bob Gendler one of the macOS Security Compliance Project (mSCP) Authors has posted some (FANTASTIC) scripts that will help integrate your mSCP project into a jamf instance. This will help…
Verify Download Checksum value
Step 1: create SHA-256 hash value from the downloaded file: General Guidance shasum -a 256 /path/to/downloaded.pkg Specific Guidance check Firefox Browser 102.1.0esr Example: shasum -a 256 /Users/USERNAME_HERE/Downloads/Firefox\ 102.1.0esr.pkg Link to…
Enforce Multifactor Authentication for Login
6.1. Enforce Multifactor Authentication for Login The system MUST be configured to enforce multifactor authentication. All users MUST go through multifactor authentication to prevent unauthenticated access and potential compromise to…
Article: Safari’s WebKit resurrected ‘zombie’ security bug
theregister.com Article: How refactoring code in Safari's WebKit resurrected 'zombie' security bug A security flaw in Apple's Safari web browser that was patched nine years ago was exploited in the…
tcpdump – dump traffic on a network
NAME tcpdump - dump traffic on a network DESCRIPTION Tcpdump prints out a description of the contents of packets on a network interface that match the boolean expression; the description…
log show
NAME log -- Access system wide log messages created by os_log, os_trace and other logging systems. DESCRIPTION log is used to access system wide log messages created by os_log, os_trace…
Apple Silicon chip vulnerability ‘Augury’ news links
Links May 2nd: Apple Silicon chip vulnerability ‘Augury’ surfaces, but researchers aren’t worried yet https://9to5mac.com/2022/05/02/augury-apple-silicon-vulnerability/ 05.02.2022: Apple Silicon Chips on iPhones, Macs Carry a New Vulnerability — Here's What Researchers…
Command Line Firewall Management In OS X 10.10
check whether Firewall is started /usr/libexec/ApplicationFirewall/socketfilterfw --getglobalstate https://krypted.com/mac-security/command-line-firewall-management-in-os-x-10-10/
Common Platform Enumeration (CPE)
Common Platform Enumeration (CPE) is a structured naming scheme for information technology (IT) systems, software, and packages. Based upon the generic syntax for Uniform Resource Identifiers (URI), CPE includes a…
Common Vulnerabilities and Exposures (CVE)
json feed of all apple related things. https://services.nvd.nist.gov/rest/json/cves/1.0?cpeMatchString=cpe:2.3:*:apple curl -s "https://services.nvd.nist.gov/rest/json/cves/1.0?cpeMatchString=cpe:2.3:*:apple" curl -s "https://services.nvd.nist.gov/rest/json/cves/1.0?cpeMatchString=cpe:2.3:*:apple:macOS:catalina" https://csrc.nist.gov/CSRC/media/Projects/National-Vulnerability-Database/documents/web%20service%20documentation/Automation%20Support%20for%20CVE%20Retrieval.pdf this is the documentation. of how to use their CVE feed hope this link works…