The vulnerability of the iOS operating system and the Safari browser allows a perpetrator to trigger a service failure or execute arbitrary code.

The vulnerability of the WebKit component of the iOS operating system and the Safari browser is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure memory corruption through a specially crafted web page...

Apple hires Encryption Expert to Beef Up Security on its Devices

The FBI and other law enforcement agencies have waged legal war on encryption and privacy technologies. You may have heard many news stories about the legal battle between Apple and the FBI over unlocking an iPhone that belonged to the San Bernardino shooter. However, that was just one battle in ...

Jetstar Airways Jetstar App for iOS Man-in-the-Middle Attack Vulnerability

Jetstar Airways Jetstar App for iOS is a suite of iOS-based applications from Jetstar Airways Australia that provide air ticket search, booking and other functions. A man-in-the-middle attack vulnerability exists in Jetstar Airways Jetstar App for iOS versions prior to 3.0.0, which originates fro...

Apple Hires Crypto Innovator Jon Callas

Jon Callas, equal parts security entrepreneur and innovator, has been hired at Apple for what will be his third stint with the company. Callas left Silent Circle, a company he cofounded, in April after four years there. Silent Circle designs and produces secure communication platforms, including...

Apple WebKit Arbitrary Code Execution Vulnerability (CNVD-2016-03507)

Apple WebKit is the open source web browser engine. An arbitrary code execution vulnerability exists in WebKit in Apple iOS prior to 9.3.2, tvOS prior to 9.2.1, and Safari prior to 9.1.1, which can be exploited by attackers to execute arbitrary code with the help of specially crafted web content...

Apple iOS/OS X El Capitan kernel arbitrary code execution vulnerability

Apple iOS is an operating system on Apple's cell phones.OS X El Capitan is a dedicated set of operating systems developed for Mac computers. A security vulnerability exists in the kernel of Apple iOS and OS X El Capitan that could be exploited by an attacker to execute arbitrary code with kernel...

Apple iOS/watchOS/tvOS and OS X El Capitan IOAcceleratorFamily Arbitrary Code Execution Vulnerability (CNVD-2016-03451)

Apple iOS is an operating system on Apple's cell phones. oS X El Capitan is a dedicated operating system developed for Mac computers. watchOS is a smartwatch operating system. A security vulnerability in IOAcceleratorFamily in Apple iOS, watchOS, and OS X El Capitan could be exploited by an...

Apple iOS/watchOS/tvOS and OS X El Capitan libc Arbitrary Code Execution Vulnerability

Apple iOS is an operating system on Apple's cell phones. oS X El Capitan is a dedicated operating system developed for Mac computers. watchOS is a smartwatch operating system. A security vulnerability in libc in Apple iOS, watchOS, and OS X El Capitan allows an attacker to submit a special reques...

Apple iOS Siri Security Bypass Vulnerability (CNVD-2016-03531)

Apple iOS is an operating system on Apple phones. Siri for Apple iOS suffers from a state management issue when accessing Siri results from the locked interface, allowing a local attacker to exploit the vulnerability to access contacts and photos from the locked interface...

CVE-2016-1831

The kernel in Apple iOS before 9.3.2 and OS X before 10.11.5 allows attackers to execute arbitrary code in a privileged context or cause a denial of service memory corruption via a crafted app...

Facebook Messenger (iOS) Certificate Validation Vulnerability

Facebook is a social networking site. Facebook has a certificate validation vulnerability that allows an attacker to exploit the vulnerability to cause a MITM attack...

JVN#11994518: Cybozu KUNAI App fails to verify SSL server certificates

Cybozu KUNAI App provided by Cybozu, Inc. fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Software Update to the latest version according to the information provided by the developer...

Motion Filed Asking FBI To Disclose Tor Browser Zero Day

Mozilla on Wednesday filed a motion with the U.S. District Court in Tacoma, Wa., asking the government to disclose a vulnerability it exploited in the Tor Browser and Firefox. The FBI used the zero-day to hack a child pornography site and de-anonymize users visiting the site using the Tor Browser...

For the First time, FBI discloses a Flaw to Apple, but it's already Patched!

In Brief The Federal Bureau of Investigation FBI made its first disclosure about a software security flaw to Apple under the Vulnerability Equities Process VEP, a White House initiative created in April 2014 for reviewing flaws and deciding which ones should be made public. Unfortunately, the...

Experts Weigh-In Over FBI $1.3 Million iPhone Payout

Was the Federal Bureau of Investigation justified in paying over $1.3 million for a hacking tool that opened the iPhone 5c of the San Bernardino shooter? For some in the security community the answer is a resounding yes. For others, the answer is not so clear-cut. FBI Director James Comey said on...

FBI paid Hacker $1.3 Million to Unlock San Bernardino Shooter's iPhone

In Brief Guess how much the FBI has paid an unknown grey-hat hacker to break into San Bernardino Shooter's iPhone? FBI Director James Comey hinted during an interview that the FBI spent more than $1.3 Million for breaking into the iPhone of a suspected terrorist and found nothing useful on it...

Report: Nothing useful found on San Bernardino Shooter's iPhone

The San Bernardino terrorist's iPhone that the Department of Justice DoJ and the Federal Bureau of Investigation FBI said was critical in their investigation has absolutely nothing useful on it, at least so far. Yes, the same iPhone that was subject of so much attention from the past few months...

The vulnerability of the iOS operating system allows attackers to bypass event handlers and modify events of arbitrary applications.

The vulnerability of the XPC Services software interface in the LaunchServices component of the iOS operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass event handler restrictions and modify events of arbitrary application...

Forensic Firm that Unlocked Terrorist's iPhone 5C is Close to Crack iPhone 6

The FBI didn't disclose the identity of the third-party company that helped them access the San Bernardino iPhone, but it has been widely believed that the Israeli mobile forensic firm Cellebrite was hired by the FBI to put an end to the Apple vs. FBI case. For those unfamiliar in the Apple vs. F...

Apple iOS 9.3 S/Plus – touch password bypass vulnerability-vulnerability warning-the black bar safety net

! Description iOS is developed by Apple Phoneoperating system, published in 2 0 0 7 years use on the iPhone and iPod Touch, and has begun to extend to other Apple devices such as the iPad and Apple TV. With Microsoft's Windows Phone Windows CEand Google's Android systems, Apple does not authorize...