Troubleshooting Secure Mail Issues with iOS Push Notifications

This article discusses how to diagnose and fix issues related to Secure Mail push notifications on iOS devices. Background Push notifications for Secure Mail allow users to receive updates when the app refreshes, and notifications about email and calendar activitythrough the Apple Push Notificati...

Android Will Alert You When A New Device Logs-in Your Google Account

Google has rolled out a new feature for Android users to keep its users account more secure: Native Android Push Notification when a new device accesses your Google account. Google has already been offering email notification for newly added devices, but since people usually ignore emails, the te...

Yahoo Deploys Passwordless Account Key Tool

In hopes of eliminating the password, at least on the company’s mobile apps, Yahoo on Friday deployed a stable version of its Account Key mechanism. The feature, essentially two-step authentication—without the first step—allows Yahoo users to log into the company’s Finance, Fantasy, Mail,...

Safari < 6.2.5 / 7.1.5 / 8.0.5 Multiple Vulnerabilities

Binary data 8696.prm...

CVE-2015-1128

The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests...

Information disclosure

The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests...

CVE-2015-1128

The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests...

CVE-2015-1128: Exposure of Sensitive Information to an Unauthorized Actor

The private-browsing implementation in Apple Safari before 6.2.5, 7.x before 7.1.5, and 8.x before 8.0.5 allows attackers to obtain sensitive browsing-history information via vectors involving push-notification requests...

Apple Safari Private Mode User Browsing History Leakage Vulnerability

Apple Safari is a popular WEB browser. A security vulnerability exists in Apple Safari, which can be exploited to disclose a user's browser history when responding to a push notification request in private browser mode. A remote attacker can exploit the vulnerability to obtain sensitive informati...

PT-2015-5112

Name of the Vulnerable Software and Affected Versions Apple Safari versions prior to 6.2.5 Apple Safari versions 7.x prior to 7.1.5 Apple Safari versions 8.x prior to 8.0.5 Description The issue affects the private-browsing implementation, allowing attackers to obtain sensitive browsing-history...

APPLE-SA-2015-04-08-1 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2015-04-08-1 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 Safari 8.0.5, Safari 7.1.5, and Safari 6.2.5 are now available and address the following: Safari Available for: OS X Mountain Lion v10.8.5, OS X Mavericks v10.9.5, and OS X Yosemite...

CVE-2014-4417

Safari in Apple OS X before 10.10 allows remote attackers to cause a denial of service universal Push Notification outage via a web site that triggers an uncaught SafariNotificationAgent exception by providing a crafted Push Notification...

Design/Logic Flaw

Safari in Apple OS X before 10.10 allows remote attackers to cause a denial of service universal Push Notification outage via a web site that triggers an uncaught SafariNotificationAgent exception by providing a crafted Push Notification...

CVE-2014-4417

CVE-2014-4417 affects Safari on OS X prior to 10.10. A crafted Push Notification from a malicious site triggers an uncaught SafariNotificationAgent exception, causing a denial of service (universal Push Notification outage). The vulnerability is addressed by improved handling of Safari Push Notif...

PT-2014-5881

Name of the Vulnerable Software and Affected Versions Safari in Apple OS X versions prior to 10.10 Description The issue allows remote attackers to cause a denial of service, resulting in a universal Push Notification outage. This is achieved through a web site that triggers an uncaught...

CVE-2014-4417: Improper Input Validation

Safari in Apple OS X before 10.10 allows remote attackers to cause a denial of service universal Push Notification outage via a web site that triggers an uncaught SafariNotificationAgent exception by providing a crafted Push Notification...

BBC News iOS App Not Hacked, Breaking News Push Messages Sent in Error

If you are one of the users of the BBC News iPhone app, then you might have receive a strange message as a breaking news notification earlier this morning. The message was sent on two separate time durations. First the message reads: "NYPD Twitter campaign 'backfires' after hashtag hijacked," the...

CVE-2013-5149: Undefined Security Weakness

The Push Notifications subsystem in Apple iOS before 7 provides the push-notification token to an app without user approval, which allows attackers to obtain sensitive information via an app that employs a crafted push-notification registration process...

#Antisec Hackers hack FBI laptop and leak 12 Million Apple Device Records

The hacker group AntiSec released a file of a million and one UDIDs unique device identifiers which it claims to have hacked it off an FBI computer via a Java vulnerability. UDIDs are unique IDs for iPhone, iPad and iPod Touch devices. They said they obtained the file in March by hacking into the...

Anonymous Leaks Apple UDIDs Following Alleged Hack of FBI

UPDATE–The Antisec arm of hacktivist group Anonymous published one million unique device identifier numbers, or UDIDs, for Apple devices, including iPhones and iPads, on Monday night. The group alleges the slew of information was swiped from a laptop belonging to the FBI earlier this year. In a...