CocoaPods-RCE_CVE-2024-38366

CocoaPods-RCE Questo repository include un approfondimento sul processo di ricerca e sulle riflessioni alla base della vulnerabilità RCE scoperta durante la ricerca e l'analisi del CocoaPods Package Manager. Il post del blog con la pubblicazione della ricerca può essere letto qui:...

Presentations

Präsentationen 2025 CodeBlue 2025 - 18. bis 19. November 2025 KI-beschleunigtes Exploiting: Kompromittierung des MTE-fähigen Pixel über den DSP-Co-Prozessor von PAN Zhenpeng & Billy JHENG Bing Jhong Tanzen mit dem Exynos-Co-Prozessor: Samsung aus Spaß und „Profit“ pwnen von Muhammad Ramdhan, PAN...

Two Vulnerabilities affecting Apple macOS exploited-in-the-wild

THREAT LEVEL: Red For a detailed advisory, download the pdf file here Two zero-day vulnerabilities were discovered in macOS Monterey versions prior to 12.3.1. These new issues bring the total number of zero-day vulnerabilities discovered in the Apple ecosystem to four. CVE-2022-22674 is an...

Inside Apple: How Apple’s attitude impacts security

Last week saw the fourth occurrence of the Objective by the Sea OBTS security conference, which is the only security conference to focus exclusively on Apples ecosystem. As such, it draws many of the top minds in the field. This year, those minds, having been starved of a good security conference...