New Zero-Click Exploits against iOS

Citizen Lab has identified three zero-click exploits against iOS 15 and 16. These were used by NSO Groups Pegasus spyware in 2022, and deployed by Mexico against human rights defenders. These vulnerabilities have all been patched. One interesting bit is that Apples Lockdown Mode part of iOS 16...

es.gizmodo.com XSS vulnerability

Vulnerable URL: http://es.gizmodo.com/tag/la-moderadora-despedida-de-reddit-rompe-su-silencio-pe-1716657188%22%3C%2FsCripT%3E%3CsCripT%3Eprompt'XSSPOSED'%3C%2FsCripT%3E Details: Description| Value ---|--- Patched:| Yes, at 30.07.2015 Latest check for patch:| 30.07.2015 04:54 GMT Vulnerability...

gizmodo.com XSS vulnerability

Vulnerable URL: http://gizmodo.com/tag/proof-that-summer-is-just-better-in-california-1716608849%22%3C%2FsCripT%3E%3CsCripT%3Eprompt'XSSPOSED'%3C%2FsCripT%3E Details: Description| Value ---|--- Patched:| Yes, at 30.07.2015 Latest check for patch:| 30.07.2015 04:51 GMT Vulnerability type:| XSS...

Scareware Launched From Gizmodo Blog

Visitors to technology blog Gizmodo are being warned that they could have picked up more than tips about the latest must-have gadget. A statement on the Gizmodo website admits that it was tricked into running Suzuki adverts which were in fact from hackers. Read the full story BBC News...