Apple Patches Three Actively Exploited Zero-Days, Part of iOS Emergency Update

Apple continues to put out potential security fires by patching zero-day vulnerabilities, releasing an emergency update this week to patch three more recently discovered in iOS after a major software update in November already fixed three that were being actively exploited. The newly patched bugs...

Apple Warns of 3 iOS Zero-Day Security Vulnerabilities Exploited in the Wild

Apple on Tuesday released updates for iOS, iPadOS, and tvOS with fixes for three security vulnerabilities that it says may have been actively exploited in the wild. Reported by an anonymous researcher, the three zero-day flaws — CVE-2021-1782, CVE-2021-1870, and CVE-2021-1871 — could have allowed...

Apple iOS Security Vulnerability

WebKit is a set of open source Web browser engine jointly developed by KDE, Apple Apple, Google Google and other companies. A security vulnerability exists in Apple WebKit, which can be exploited by remote attackers to cause arbitrary code execution. The following products and versions are...

Transferring data between smartphones seamlessly

By Sudais Asif Apple is strict on privacy which is a positive thing to do but what if you would like to transfer or backup WhatsApp data from an iPhone to a PC? This is a post from HackRead.com Read the original post: Transferring data between smartphones seamlessly...

CVE-2020-16046

Script injection in iOSWeb in Google Chrome on iOS prior to 84.0.4147.105 allowed a remote attacker to execute arbitrary code via a crafted HTML page...

Apple Security Update: iOS 12.5.1

Apple recommends to install security update iOS 12.5.1 on devices iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch 6th generation...

Apple Security Update: iOS 12.5.1

Apple recommends to install security update iOS 12.5.1 on devices iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPod touch 6th generation...

iPhone Calendar Events spam is back: Here’s how to get rid of it

By Asad Remember the old annoying iPhone Calendar Events Spam? It’s back and worse than before. This is a post from HackRead.com Read the original post: iPhone Calendar Events spam is back: Here’s how to get rid of it...

Zero-Click Apple Zero-Day Uncovered in Pegasus Spy Attack

Four nation-state-backed advanced persistent threats APTs hacked Al Jazeera journalists, producers, anchors and executives, in an espionage attack leveraging a zero-day exploit for Apple iPhone, researchers said. The attack, carried out in July and August, compromised 36 personal phones belonging...

iPhones of 36 Journalists Hacked Using iMessage Zero-Click Exploit

Three dozen journalists working for Al Jazeera had their iPhones stealthily compromised via a zero-click exploit to install spyware as part of a Middle East cyberespionage campaign. In a new report published yesterday by University of Toronto's Citizen Lab, researchers said personal phones of 36...

Apple iOS Security Vulnerability

Apple App Store is an application store for downloading software from Apple Inc. in the United States. A security vulnerability exists in the Apple App Store that can be exploited by attackers to run code. The following products and versions are affected: iPhone 6s and later, iPad Air 2 and later...

Apple iOS Security Vulnerability

Apple iOS is a set of operating systems developed for mobile devices by the American company Apple Apple. A security vulnerability exists in Apple iOS 12, where unauthorized code execution may result in a violation of authentication policies. The following products and versions are affected: iPho...

About the security content of iOS 12.5

About the security content of iOS 12.5 This document describes the security content of iOS 12.5. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recen...

CVE-2020-27905

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 14.2 and iPadOS 14.2, tvOS 14.2, watchOS 7.1. A malicious application may be able to execute arbitrary code with system privileges...

CVE-2020-9996

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Big Sur 11.0.1, iOS 14.0 and iPadOS 14.0. A malicious application may be able to elevate privileges...

CVE-2020-9993

The issue was addressed with improved UI handling. This issue is fixed in watchOS 7.0, Safari 14.0, iOS 14.0 and iPadOS 14.0. Visiting a malicious website may lead to address bar spoofing...

CVE-2020-10013

A logic issue was addressed with improved state management. This issue is fixed in tvOS 14.0, iOS 14.0 and iPadOS 14.0. An application may be able to execute arbitrary code with kernel privileges...

Chromium 83 - Full CSP Bypass

Title: Chromium 83 - Full CSP Bypass Date: 02/09/2020 Exploit Author: Gal Weizman Vendor Homepage: https://www.chromium.org/ Software Link: https://download-chromium.appspot.com/ Version: 83 Tested On: Mac OS, Windows, iPhone, Android CVE: CVE-2020-6519 function var payload = top.SUCCESS = true;...

A ‘Magical Bug’ Exposed Any iPhone in a Hacker's Wi-Fi Range

A Google researcher found flaws in Apple's AWDL protocol that would have allowed for a complete device takeover...

Zero-Click exploit allowed attackers to hack any targeted iPhone

By Deeba Ahmed The iOS vulnerability allowed hackers to control your iPhone within radio proximity using AWDL. Here's its demo video. This is a post from HackRead.com Read the original post: Zero-Click exploit allowed attackers to hack any targeted iPhone...