Apple's MacOS Gap Lets Users Disable Security Tools

This article details a macOS security vulnerability discovered by XM Cyber that allows standard users to disable enterprise security tools like CrowdStrike Falcon EDR and Kandji MDM without administrator privileges. The flaw stems from how macOS caches application trust information (CDHash) and enables an attacker to i…