Latest news from Naked Security (2019/12/06)

Mac users targetted by Lazarus ‘fileless’ Trojan

The Lazarus hacking group are trying to sneak a ‘fileless’ Trojan on to Apple computers, disguised as a fake cryptocurrency trading program.

US parents file class action against TikTok over children’s privacy

Collecting children’s data without their guardians’ consent is illegal under COPPA and already earned TikTok a huge fine.

Instagram trying to protect kids by getting dates of birth from new users

It’s about showing age-appropriate content, it said. Though staying safe from child-privacy lawsuits doesn’t hurt, either.

OpenBSD devs patch authentication bypass bug

One of the internet’s most popular free operating systems allowed attackers to bypass its authentication controls.