CocoaPods-RCE_CVE-2024-38366

CocoaPods-RCE Este repositorio incluye un análisis un poco más profundo del proceso de investigación y las ideas detrás de la vulnerabilidad RCE encontrada al investigar y romper el CocoaPods Package Manager. La publicación del blog con la investigación se puede leer aquí:...

Presentations

Presentaciones 2025 CodeBlue 2025 - 18 al 19 de noviembre de 2025 Explotación acelerada con IA: comprometiendo el Pixel habilitado para MTE desde el coprocesador DSP por PAN Zhenpeng y Billy JHENG Bing Jhong Bailando con el coprocesador Exynos: hackeando Samsung por diversión y “beneficio” por...

Two Vulnerabilities affecting Apple macOS exploited-in-the-wild

THREAT LEVEL: Red For a detailed advisory, download the pdf file here Two zero-day vulnerabilities were discovered in macOS Monterey versions prior to 12.3.1. These new issues bring the total number of zero-day vulnerabilities discovered in the Apple ecosystem to four. CVE-2022-22674 is an...

Inside Apple: How Apple’s attitude impacts security

Last week saw the fourth occurrence of the Objective by the Sea OBTS security conference, which is the only security conference to focus exclusively on Apples ecosystem. As such, it draws many of the top minds in the field. This year, those minds, having been starved of a good security conference...