Mac security under threat, Russian hackers, Apple Music Video, SoundSource for Mac


GarageBand update to 10.1.6 patches potentially malicious exploit — Hidden in the Mac App Store updates tab the past day or two has been an update for GarageBand to version 10.1.6. While the update notes state that the new code is to fix “Performance and security issues”, it appears that the primary reason was to shut the door on a vulnerability in GarageBand.
Opening a “maliciously crafted” GarageBand project file could cause “arbitrary code execution”.  {So take note: you have to open a GarageBand file someone sends you to be vulnerable, but still, it shows Apple’s profile is so big now, the malware makers and hackers are finally looking seriously at exploiting us – and read on.]

‘Xagent’ malware arrives on Mac, steals passwords, screenshots, iPhone backups — A Russian hacking group accused of interfering with last year’s US presidential election has evolved its Xagent malware package, known for its ability to infiltrate Windows, iOS, Android and Linux devices, to target Macs, according to a report on Tuesday. The Mac strain of Xagent is similar to its predecessors in that it acts as a modular backdoor for intruders, reports Ars Technica.
Circumstantial evidence suggests APT28, also known as Sofacy, Sednit, Fancy Bear and Pawn Storm, has deep ties with the Russian government. The shift in hacker attention from Windows to Apple products is likely due to the success of iOS, an operating system used by a huge percentage of smartphone users worldwide. [So meantime, be careful downloading any software unless it’s from the Mac App Store or trusted developers like RogueAmoeba.]

Eddy Cue says video is a big part of Apple Music’s future — The future of streaming music is streaming media, according to Apple’s Eddy Cue, which is why the company is behind shows like Carpool Karaoke and Planet of the Apps. The “Apple Music is more than just music” message is one he’s already expressed, and it’s a sign Apple’s competition in the streaming music market is growing beyond Spotify and Tidal to more inclusive services like Amazon Prime.

Rogue Amoeba unveils SoundSource for macOS — Rogue Amoeba has unveiled SoundSource, a macOS tool that provides access to critical audio settings. With it, users can instantly change the audio devices used for input, output, and sound effects, adjust the volume levels of those devices, and more.
SoundSource runs on macOS 0.10 and higher. A free fully-functional trial available for download. While in trial mode, SoundSource’s features will disable after 10 minutes of use. The unrestricted full version can be purchased for US$10. Owners of any current Rogue Amoeba application for Mac are eligible for a complimentary SoundSource license. To do that, you enter your email address, name and license code for another Rogue Amoeba product (in my case, Audio Hijack)  on this page and they send you a Sound Source license.