EUVD-2013-4993

Malware in sbrugna...

New iPhone Security Features to Protect Stolen Devices

Apple is rolling out a new "Stolen Device Protection" feature that seems well thought out: When Stolen Device Protection is turned on, Face ID or Touch ID authentication is required for additional actions, including viewing passwords or passkeys stored in iCloud Keychain, applying for a new Apple...

Apple to introduce new feature that makes life harder for iPhone thieves

Reportedly, Apple has plans to make it harder for iPhone thieves to steal your personal information even if they have your device’s passcode. A new feature called Stolen Device Protection is included in the beta version of iOS 17.3. The feature limits access to your private information in case...

Apple AirTag Zero-Day Weaponizes Trackers

An unpatched stored cross-site scripting XSS bug in Apple’s AirTag “Lost Mode” could open up users to a cornucopia of web-based attacks, including credential-harvesting, click-jacking, malware delivery, token theft and more. That’s according to Bobby Rauch, an independent security researcher who...

Apple AirTag Bug Enables ‘Good Samaritan’ Attack

The new $30 AirTag tracking device from Apple has a feature that allows anyone who finds one of these tiny location beacons to scan it with a mobile phone and discover its owners phone number if the AirTag has been set to lost mode. But according to new research, this same feature can be abused t...

Apple iOS new vulnerability: hackers can bypass the“activation lock”-vulnerability warning-the black bar safety net

Foreign media reports that security researchers recently discovered one can be used to bypass Apple iOS“activation lock,”the Activation Lock function of the vulnerability, and even evaluate the latest iOS10. 1. 1 system is also not spared. ! Apple iOS new vulnerability: hackers can bypass...

CVE-2014-4435: Improper Authentication

The "iCloud Find My Mac" feature in Apple OS X before 10.10 does not properly enforce rate limiting of lost-mode PIN entry, which makes it easier for physically proximate attackers to obtain access via a brute-force attack involving a series of reboots...

PT-2014-5898

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10 Description The issue concerns the "iCloud Find My Mac" feature, which does not properly enforce rate limiting of lost-mode PIN entry. This makes it easier for physically proximate attackers to obtain access...

Code injection

Springboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which allows physically proximate attackers to read notifications via unspecified vectors...

CVE-2013-5153

CVE-2013-5153 affects Apple iOS Springboard in Lost Mode. The issue is improper lock state management, allowing physically proximate attackers to read notifications. The remediation documented in the connected Apple security update indicates an improved lock state handling, addressed in iOS 7.0+....

CVE-2013-5153

Springboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which allows physically proximate attackers to read notifications via unspecified vectors...

PT-2013-5398

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue is related to the Springboard in Apple iOS, where it does not properly manage the lock state in Lost Mode. This allows physically proximate attackers to read notifications via unspecified...

CVE-2013-5153: Undefined Security Weakness

Springboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which allows physically proximate attackers to read notifications via unspecified vectors...