News: 1609881904

  ARM Give a man a fire and he's warm for a day, but set fire to him and he's warm for the rest of his life (Terry Pratchett, Jingo)

Blackberry Cylance's consumer antivirus product won't work with macOS Big Sur until end of January

(2021/01/05)


Blackberry Cylance's consumer antivirus product will not support macOS Big Sur until the end of January – three months after the Apple operating system’s latest version was released.

The iGiant's OS hit version 11 on Friday 13th November, appropriately enough [1]given the chaos that followed , yet despite version 11.1 being released in mid-December, Cylance still hasn't updated its Smart Antivirus product to support it.

This means users of macOS 11.0 or 11.1 must pick between applying operating system upgrades that patch [2]more than 50 security vulnerabilities acknowledged by Apple in previous macOS versions, or having their chosen antivirus product running on their out-of-date machines.

Cylance's competitors all managed to sort themselves out and support the new version of macOS either at launch or in the days afterwards. Sophos had updated its consumer-grade products to support Big Sur by the [3]beginning of December ; Avira supported it from the [4]date of Big Sur's release , as did [5]Malwarebytes . AVG also managed to get its act together [6]in November to support Big Sur, which was released in beta back in June at Apple's Worldwide Developer Conference.

Other antivirus vendors were too shy to comment on Cylance's woes but [7]forlorn Redditors looking for hope instead discovered a Cylance [8]support statement dated 25 November, which baldly stated: "If users have Cylance Smart Antivirus installed on devices that are running macOS 10.15 (Catalina) or earlier, they should not upgrade their devices to macOS 11.0 until further notice."

Bitdefender said that its Endpoint Security for Mac product encountered some [9]minor difficulties when Big Sur v11.0 first exited beta, noting: "Specifically, Apple has replaced the previous kernel extensions with system extensions, which run in the user space. Therefore, Bitdefender has switched for Endpoint Security for Mac from kernel extensions to system extensions too."

Blackberry, owners of Cylance, told The Register in a statement: "Apple has introduced major changes with the release of macOS 11.0/11.1 Big Sur. The biggest one being the inability for applications to use 'kernel extensions' or 'kext' when running on Big Sur. We have released an 'Early Adopter' version of BlackBerry Protect for Big Sur to our Enterprise customers. We expect to release a [Cylance Smart Antivirus] version compatible with macOS Big Sur by the end of January."

In this era of ever-evolving cybersecurity threats, offering even a consumer-grade product that won't work with the latest version of an operating system used by millions worldwide isn't a great look. If you're in a SME relying on consumer security software instead of a proper enterprise-grade product, now is a good time to take a look at the potential risks you're running by doing so. ®

Get our [10]Tech Resources



[1] https://www.theregister.com/2020/11/13/apple_releases_big_sur/

[2] https://support.apple.com/en-gb/HT212011

[3] https://support.home.sophos.com/hc/en-us/articles/360051251412-Support-for-macOS-11-Big-Sur-

[4] https://support.avira.com/hc/en-us/community/posts/360013935857-Avira-Free-Security-for-macOS-11-Big-Sur

[5] https://forums.malwarebytes.com/topic/266438-compatibility-with-macos-11-big-sur/

[6] https://support.avg.com/answers?id=9065p000000gmUzAAI

[7] https://www.reddit.com/r/Cylance/comments/kdu55x/cylance_and_macos_11_big_sur/gfz3zq9/

[8] https://support.blackberry.com/kb/articleDetail?language=en_US&articleNumber=000071519

[9] https://www.bitdefender.com/support/changes-to-bitdefender-endpoint-security-for-mac-in-macos-big-sur-(11-0)-2626.html

[10] https://whitepapers.theregister.com/

They're not alone

Pete B

When you log in to Sophos Central there's a banner across the top saying

"Endpoint Protection doesn't support macOS 11 (Big Sur) yet. Please don't upgrade until we announce that we support it. An EAP is available now."

Since pretty much all vendors seems to be slow to develop versions for new release of MacOS I assume that either the number of Macs in the workplace is too small for them to prioritise, or Apple make things so difficult that itm genuinely takes third party's that long to deal with the upgrades. (I've seen issues with the following off the top of my head recently - Adobe, Kyocera, Sophos, Brother, Konica.

Consumer antivirus on macOS is a big waste

needmorehare

Seriously. a much easier "consumer anti-virus" is to rig up macOS to only allow execution of App Store apps and to only use an unprivileged account with a locked down Applications directory. The apps you are able to run can't execute arbitrary code or get hacked in a way which achieves persistence due to the sandboxing requirements and hardened runtime.

To update Voltaire, "I may kill all msgs from you, but I'll fight for
your right to post it, and I'll let it reside on my disks".
-- Doug Thompson (doug@isishq.FIDONET.ORG)