Researchers Warn macOS textutil, KeePassXC Can Fuel Automation Attacks

Researchers demonstrate that trusted local utilities can become security-relevant in automation: macOS textutil may automatically fetch remote resources when converting HTML (creating an SSRF-style risk), and KeePassXC KDBX files can carry attacker-controlled KDF parameters that massively increase CPU time and enable resource-exhaustion attacks; mitigations include disabling external loads, sandboxing, restricting outbound access, and limiting or validating KDF settings.