3CX DLL-Sideloading attack: What you need to know
I feel like this may be a continuation of: https://community.sophos.com/intercept-x-endpoint/big-sur-eap/f/discussions/126631/big-sur-11-2-3---intercept-x-10-0-4---adobe-indesign-opening-files-as-read-only
We recently installed Sophos Endpoint on our Mac computers in our Art Department. The artists then noticed that InDesign started opening files on a NAS device as read-only at random times.
We tried the trick of temporarily disabling CryptoGuard but this did not solve the issue.
I know I saw that Sophos concluded it was on Apple's end for the file processing or Adobe's end for opening files, but we had been running the same setups and the only variable to change was change from the Sophos Enterprise Console to the Sophos Endpoint.
We are currently getting through this by closing and reopening the file, or saving to the desktop, but neither seem like an actual solution.
Are there any workarounds now that the macOS and InDesign are on a newer version than previously investigated?
Hi Jonathan Gingrich ,
Thank you for reaching out to the Sophos Community Forum. Upon checking, this known issue with Adobe InDesign still exists with macOS Monterey and even with Ventura. It also appears that the Apple bug is still open (https://support.sophos.com/support/s/article/KB-000043761?language=en_US). But I'm currently inquiring internally regarding this, and I'll let you know as I soon as I have more details.
Thank you for looking into this for us.
has there been any progress on a solution for this?
Hi Jane Munden ,
Thank you for your continued patience. Our escalations team is currently doing tests on the environment of some of the affected users with the 10.4.7 version. We're expecting to get some feedback by the end of the week or earlier next week. Either way, I will update this thread once we have the results.
In the meantime, can you please share the current Sophos Endpoint core agent version running on your device?
I have reached out to you via Private Message to further assist you on this. Thank you.