New macOS security flaw could let hackers disable protection tools, researchers say

Security firm XM Cyber found a macOS technique that can let standard user accounts disable some enterprise security tools without administrator credentials. The research focuses on trusted macOS communication channels Researchers disclosed the findings ahead of a planned Black Hat Arsenal presentation in August, where they'll demonstrate an open-source tool called XPC Hunter. XM Cyber reported successful attacks against CrowdStrike Falcon and Kandji on macOS.