The problem, said iSec, lies in the way that OS X networks handle authentication protocols. Researchers explained that the protocols themselves could be harvested and then cracked offline with ‘brute force’ methods.

The company presented results of a test scenario in which an Apple network could be breached through a targeted attack on an end-user system. From there, researchers were able to run a local DNS attack to harvest credentials and obtain administrator access to a network and compromise all devices.