KTRW: The journey to build a debuggable iPhone

Posted by Brandon Azad, Project Zero In my role here at Project Zero, I do not use some of the tooling used by some external iOS security researchers, in particular development-fused iPhones with hardware debugging capabilities like JTAG enabled. I believe that access to such devices puts those w...

Fake iOS Jailbreak Site Lures in Apple Users

Bad actors are taking advantage of a recently-disclosed iOS bug with a fake website claiming to give iPhone users the ability to jailbreak their phones. In reality, researchers warn, the site ultimately enables attackers to conduct click fraud. A jailbreak, a method to escape Apple’s limitations ...

Apple Security Update: iOS 13.1.3 and iPadOS 13.1.3

Apple recommends to install security update iOS 13.1.3 and iPadOS 13.1.3 on devices iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation...

Apple Security Update: iOS 13.1.3 and iPadOS 13.1.3

Apple recommends to install security update iOS 13.1.3 and iPadOS 13.1.3 on devices iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation...

New Unpatchable iPhone Exploit Allows Jailbreaking

A new iOS exploit allows jailbreaking of pretty much all version of the iPhone. This is a huge deal for Apple, but at least it doesn't allow someone to remotely hack people's phones. Some details: I wanted to learn how Checkm8 will shape the iPhone experience­ -- particularly as it relates to...

iPhone BootROM vulnerability description and threat assessment-vulnerability warning-the black bar safety net

0x00-related vocabulary AP: application processor. SEP: security coprocessor. SecureROM: also known as the BootROM is cured in the iPhone the read-only area in the section of the code, the area code is to start the chain and start the chain of trust starting point, the main responsible for loadin...

Apple Security Update: iOS 13.1.2 and iPadOS 13.1.2

Apple recommends to install security update iOS 13.1.2 and iPadOS 13.1.2 on devices iPhone 6s and later, iPad Air 2 and later, iPad mini 4 and later, and iPod touch 7th generation...

Unspecified Vulnerability in Apple iOS and iPadOS Sandbox Components

Apple iOS and Apple iPadOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple iPadOS is an operating system for the iPad tablet computer. sandbox is a sandbox component. A security vulnerability exists in the Sandbox component of Apple iOS before...

Apple iOS Messages Component Information Disclosure Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. Messages is an application component for sending text, photos and videos. An information disclosure vulnerability exists in the Messages component in versions of Apple iOS prior to 13, which can be exploited by an attacke...

Keybase has an unspecified vulnerability

Keybase is a social networking platform that supports end-to-end encryption based on PGP technology. An unspecified vulnerability exists in the iOS-based Keybase version 2.13.2, which stems from a backdoor in the program that can be exploited by an attacker to sign an authentication using a user'...

Hacker publishes ‘unpatchable’ permanent jailbreak for iPhone 4s to iPhone X

By Sudais Apple's jailbreak just became easier. This is a post from HackRead.com Read the original post: Hacker publishes 'unpatchable' permanent jailbreak for iPhone 4s to iPhone X...

Unfixable iOS Device Exploit Is the Latest Apple Security Upheaval

Any iPhone device from 2011 to 2017 could soon be jailbroken, thanks to an underlying flaw that there's no way to patch...

iOS Exploit 'Checkm8' Could Allow Permanent iPhone Jailbreaks

A researcher is warning of an un-patchable bug affecting hundreds of millions of iPhones that gives attackers system-level access to handsets via an unblockable jailbreak hack. Right now, the scope of the attack is limited. The exploit is dubbed “checkm8” by a security researcher who goes by the...

New iOS exploit checkm8 allows permanent compromise of iPhones

UPDATE 9/27, 11:00am: Updated for the misconception that the bootrom was actually being modified. Apparently, the "permanent" only refers to the fact that the bug is in the bootrom, where it cannot be patched. UPDATE 9/27, 12:15am: After speaking with @axi0m8, clarified a few other points,...

Hacker Releases 'Unpatchable' Jailbreak For All iOS Devices, iPhone 4s to iPhone X

An iOS hacker and cybersecurity researcher today publicly released what he claimed to be a "permanent unpatchable bootrom exploit," in other words, an epic jailbreak that works on all iOS devices ranging from iPhone 4s A5 chip to iPhone 8 and iPhone X A11 chip. Dubbed Checkm8, the exploit leverag...

Hacker Releases 'Unpatchable' Jailbreak For All iOS Devices, iPhone 4s to iPhone X

An iOS hacker and cybersecurity researcher today publicly released what he claimed to be a "permanent unpatchable bootrom exploit," in other words, an epic jailbreak that works on all iOS devices ranging from iPhone 4s A5 chip to iPhone 8 and iPhone X A11 chip. Dubbed Checkm8, the exploit leverag...

iOS 13 Bug Lets 3rd-Party Keyboards Gain 'Full Access' — Even When You Deny

Following the release of iOS 13 and iPadOS earlier this week, Apple has issued an advisory warning iPhone and iPad users of an unpatched security bug impacting third-party keyboard apps. On iOS, third-party keyboard extensions can run entirely standalone without access to external services and...

Apple Security Update: iOS 12.4.2

Apple recommends to install security update iOS 12.4.2 on devices iPhone 5s, iPhone 6, iPhone 6 Plus, iPad Air, iPad mini 2, iPad mini 3, and iPad touch 6th generation...

The iOS 13 Privacy and Security Features You Should Know

Your iPhone just got a major security upgrade. Here are all the ins and outs...

About the security content of iOS 12.1 - Apple Support

About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available. Recent releases are listed on the Apple security updates page. For more information about security, se...