Apple pushed out its latest operating system, El Capitan, yesterday, and while it boasts many security fixes, the update fails to address the outstanding vulnerability in Gatekeeper that came to light this week. The new OS X doesn t appear to fix the XARA password stealing vulnerabilities in Keychain that a collective of Indiana University students publicized this summer. Apple is reportedly working on a short term mitigation for the simple, but effective bypass that Patrick Wardle cooked up and presented at Virus Bulletin today in Prague.
Source: https://threatpost.com/apple-patches-100-vulnerabilities-in-os-x-safari-ios/114876/