- Researchers show Gatekeeper can be bypassed by replacing a previously run legitimate macOS app with malware
- Attack requires prior user‑level code execution, then swaps in a malicious app that Gatekeeper won’t re‑verify
- Apple dismissed the issue, saying locally rebuilt bundles fall outside Gatekeeper’s scope, leaving risk to social engineering
A pair of researchers claims to have found a way around Gatekeeper, a built-in macOS security feature that helps protect users from running malicious or untrusted software. However Apple doesn’t really see it that way and has seemingly decided not to pursue the issue further.
