MAL-2023-122 Malicious code in beautiful-tempest-malory-anderson-family-12-by-johanna-lindsey-on-iphone-new-format- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 7faa105f44cbe37ad6640900de81ba2fd9b8d8a89555a095bee8fc30a934e3a2 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-878 Malicious code in the-universe-has-your-back-transform-fear-to-faith-by-gabrielle-bernstein-on-iphone-full-pages- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware bd2dda2348af7d4384cb9a35d0387e5b87503b49779170d897bca656ab712b0e Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-124 Malicious code in before-we-were-yours-by-lisa-wingate-on-iphone-new-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware c8470da6676326759a76dc9d39a1b78092763c1fe2547cf5521dd1d248479e45 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-580 Malicious code in managed-vip-2-by-kristen-callihan-on-iphone-full-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 9488572be5c3f73c9703b24b7739fc80fc8f178aedc148a91565e1985e2ea3e8 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-576 Malicious code in madly-whiskey-the-whiskeys-dark-knights-at-peaceful-harbor-2-by-melissa-foster-on-iphone-new-pages- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 5e6d5e9b9b10956e9d21185613961b0218746442e8be9aebc33cc51a27e1782a Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-874 Malicious code in the-seven-husbands-of-evelyn-hugo-by-taylor-jenkins-reid-on-iphone-new-chapters- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware d240e63a84ecaa135d6aa00650d64a495646d87f589e34317a020e63cb8b0eb9 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

MAL-2023-676 Malicious code in pdf-off-base-out-of-uniform-1-by-annabeth-albert-on-iphone-new-volumes- (npm)

--- -= Per source details. Do not edit below this line.=- Source: ghsa-malware 2cf09654a591215607f3810d8577ac6bf84cecbb3fee655112ad763ba12ad249 Any computer that has this package installed or running should be considered fully compromised. All secrets and keys stored on that computer should be...

CVE-2023-27961

Multiple validation issues were addressed with improved input sanitization. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, macOS Monterey 12.6.4, watchOS 9.4, macOS Big Sur 11.7.5. Importing a maliciously crafted calendar invitation may exfiltra...

CVE-2023-23537

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Ventura 13.3, iOS 16.4 and iPadOS 16.4, iOS 15.7.4 and iPadOS 15.7.4, watchOS 9.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information...

Apple iOS 和 iPadOS 安全漏洞

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices.Apple iPadOS is an operating system for the iPad tablet computer. A security vulnerability exists in Apple iOS and iPadOS. An attacker can exploit this vulnerability to execute...

PT-2023-21453 · Apple · Ios +1

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 16.4 iPadOS versions prior to 16.4 Description: The issue was addressed with improved memory handling. An app may be able to execute arbitrary code with kernel privileges. Recommendations: For iOS versions prior to 16.4,...

CVE-2023-32290

The myMail app through 14.30 for iOS sends cleartext credentials in a situation where STARTTLS is expected by a server...

Transferring WhatsApp Data Between Android and iPhone [2023]

By Owais Sultan When you transfer data from an Android to an iOS device, the Move to an iOS app is… This is a post from HackRead.com Read the original post: Transferring WhatsApp Data Between Android and iPhone 2023...

Using the iPhone Recovery Key to Lock Owners Out of Their iPhones

This a good example of a security feature that can sometimes harm security: Apple introduced the optional recovery key in 2020 to protect users from online hackers. Users who turn on the recovery key, a unique 28-digit code, must provide it when they want to reset their Apple ID password. iPhone...

NSO Group Used 3 Zero-Click iPhone Exploits Against Human Rights Defenders

Israeli spyware maker NSO Group deployed at least three novel "zero-click" exploits against iPhones in 2022 to infiltrate defenses erected by Apple and deploy Pegasus, according to the latest findings from Citizen Lab. "NSO Group customers widely deployed at least three iOS 15 and iOS 16 zero-cli...

NSO Group Used 3 Zero-Click iPhone Exploits Against Human Rights Defenders

Israeli spyware maker NSO Group deployed at least three novel "zero-click" exploits against iPhones in 2022 to infiltrate defenses erected by Apple and deploy Pegasus, according to the latest findings from Citizen Lab. "NSO Group customers widely deployed at least three iOS 15 and iOS 16 zero-cli...

QuaDream: Israeli Cyber Mercenary Behind iPhone Hacks

By Habiba Rashid Citizens Lab and Microsoft have exposed an Israeli firm, QuaDream, selling spyware to governments around the world. This is a post from HackRead.com Read the original post: QuaDream: Israeli Cyber Mercenary Behind iPhone Hacks...

How to Use Apple’s New All-In-One Password Manager

Your iPhone, iPad, and Mac now have a built-in password feature, complete with two-factor authentication...

CVE-2022-46709

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Ventura 13, iOS 16. An app may be able to execute arbitrary code with kernel privileges...

CVE-2022-32871

A logic issue was addressed with improved restrictions. This issue is fixed in iOS 16. A person with physical access to a device may be able to use Siri to access private calendar information...