ManageEngine Desktop Central MSP AndroidCheckInServlet UDID Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of ManageEngine Desktop Central MSP. Authentication is not required to exploit this vulnerability. The specific flaw exists within the AndroidCheckInServlet servlet. The issue lies in the failure to...

Apple Sets May 1 End Date for Apps that Want UDIDs

Apple has implemented a deadline for when it will reject apps that access devices’ unique device identifier numbers, or UDIDs. Apple has been phasing out the 40-character string of letters and numbers over the last year, yet according to a post on Apple’s Developers site yesterday, this appears t...

Puzzle Solver Uncovers Apple UDID Breach Source

When David Schuetz woke up last Friday, little did he think he’d be a central figure in clearing the FBI’s good name, much less end up on the NBC Nightly News, but that’s exactly what happened. Schuetz, a senior consultant with Intrepidus Group, put his best detective hat on last week and pieced...

Florida Digital Publisher Says It's the Source of Apple UDID Leak

The chief executive of a Florida-based digital publisher said Monday he believes his company is the source of a data leak of a million Apple unique device IDs — not the FBI as a hacktivist group claimed. “A little more than a week ago, BlueToad was the victim of a criminal cyber attack, which...

#Antisec Hackers hack FBI laptop and leak 12 Million Apple Device Records

The hacker group AntiSec released a file of a million and one UDIDs unique device identifiers which it claims to have hacked it off an FBI computer via a Java vulnerability. UDIDs are unique IDs for iPhone, iPad and iPod Touch devices. They said they obtained the file in March by hacking into the...

New Trojan Spreading On App Store and Google Play

A new Trojan that uploads users’ phonebooks to a remote server is making the rounds, circulating on both Apple’s App Store and the Google Play marketplaces, according to research by Kaspersky Lab posted on the Securelist web site earlier today. Kaspersky virus researchers, responding to a request...

Apple Clamps Down, Begins to Reject Apps Looking for UDID Numbers

Facing mounting privacy concerns, Apple has begun to reject mobile applications that require access to an iOS device’s unique device identifier number UDID, according to a report from the Web site Techcrunch. The company announced last summer it would be phasing out UDID numbers with the launch o...