Hello AGAIN Chemists,

Today a rather enormous exploit was discovered in MacOS High Sierra.

Long story short, a local user can gain root (full administrative) access without the root password.

 

When we turned on our (High Sierra) Mac it said it had just installed the update, so we know it auto-installs with priority so this should jeopardize very few users, HOWEVER if you have turned that off, are offline, or otherwise blocked automatic updates, PLEASE install Security Update 2017-001 ASAP!

 

Detailed info:

• https://www.macrumors.com/2017/11/29/apple-fixes-root-password-bug-security-update/
• https://support.apple.com/en-us/HT208315