Lucene search
+L

259 matches found

Prion
Prion
added 2021/08/24 7:15 p.m.16 views

Input validation

A sync issue was addressed with improved state validation. This issue is fixed in macOS Monterey 12.0.1. A user's messages may continue to sync after the user has signed out of iMessage...

5CVSS5AI score0.00804EPSS
Exploits0References1Affected Software1
Cvelist
Cvelist
added 2021/08/24 6:50 p.m.26 views

CVE-2021-30904

A sync issue was addressed with improved state validation. This issue is fixed in macOS Monterey 12.0.1. A user's messages may continue to sync after the user has signed out of iMessage...

6AI score0.00804EPSS
Exploits0References1
CVE
CVE
added 2021/08/24 6:50 p.m.62 views

CVE-2021-30904

CVE-2021-30904 affects macOS Monterey 12.0.x in the Apple Messages sync flow. The issue is a sync/state validation bug that could allow a user’s messages to continue syncing after signing out of iMessage. Apple fixed this in macOS Monterey 12.0.1 (per HT212869). Connected feeds corroborate the de...

5.3CVSS5.5AI score0.00804EPSS
Exploits0References1Affected Software1
ThreatPost
ThreatPost
added 2021/08/24 5:51 p.m.49 views

Pegasus Spyware Uses iPhone Zero-Click iMessage Zero-Day

A never-before-seen, zero-click iMessaging exploit has been allegedly used to illegally spy on Bahraini activists with NSO Group’s Pegasus spyware, according to cybersecurity watchdog Citizen Lab. The digital researchers are calling the new iMessaging exploit FORCEDENTRY. In a report published on...

6.8AI score
Exploits0References23
The Hacker News
The Hacker News
added 2021/08/24 12:8 p.m.47 views

Bahraini Activists Targeted Using a New iPhone Zero-Day Exploit From NSO Group

A previously undisclosed "zero-click" exploit in Apple's iMessage was abused by Israeli surveillance vendor NSO Group to circumvent iOS security protections and target nine Bahraini activists. "The hacked activists included three members of Waad a secular Bahraini political society, three members...

0.2AI score
Exploits0
CNNVD
CNNVD
added 2021/08/24 12:0 a.m.6 views

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Monterey before 12.0.1. The vulnerability stems from the possibility that a user's messages may continue to synchronize after the user exits iMessage...

5.3CVSS5.8AI score0.00804EPSS
Exploits0References1
Schneier on Security
Schneier on Security
added 2021/08/10 11:37 a.m.27 views

Apple Adds a Backdoor to iMessage and iCloud Storage

Apples announcement that its going to start scanning photos for child abuse material is a big deal. Here are five news stories. I have been following the details, and discussing it in several different email lists. I dont have time right now to delve into the details, but wanted to post something...

7.4AI score
Exploits0
Malwarebytes
Malwarebytes
added 2021/08/06 9:10 p.m.74 views

Apple’s search for child abuse imagery raises serious privacy questions

The Internet has been on fire since the August 4 discovery disclosed publicly by Mathew Green that Apple will be monitoring photos uploaded to iCloud for child sexual abuse material CSAM. Some see this as a great move by Apple that will protect children. Others view this as a potentially dangerou...

6.7AI score
Exploits0
HackRead
HackRead
added 2021/05/18 7:5 p.m.34 views

Here are 5 MacBook Hacks that You Must Know

By Waqas MacBook hacks are endless. There is AirDrop, there is iMessage; the options are limitless but here are 5 quick hacks to make the best out of a MacBook. This is a post from HackRead.com Read the original post: Here are 5 MacBook Hacks that You Must Know...

0.8AI score
Exploits0
OSV
OSV
added 2021/04/02 6:15 p.m.6 views

CVE-2021-1771

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. A user that is removed from an iMessage group could rejoin the group...

3.3CVSS5.8AI score0.00546EPSS
Exploits0References1
NVD
NVD
added 2021/04/02 6:15 p.m.21 views

CVE-2021-1771

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. A user that is removed from an iMessage group could rejoin the group...

4.3CVSS0.00546EPSS
Exploits0References1
Prion
Prion
added 2021/04/02 6:15 p.m.17 views

Design/Logic Flaw

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. A user that is removed from an iMessage group could rejoin the group...

4.3CVSS4.1AI score0.00546EPSS
Exploits0References1Affected Software2
Cvelist
Cvelist
added 2021/04/02 5:56 p.m.31 views

CVE-2021-1771

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. A user that is removed from an iMessage group could rejoin the group...

5.4AI score0.00546EPSS
Exploits0References1
CVE
CVE
added 2021/04/02 5:56 p.m.84 views

CVE-2021-1771

CVE-2021-1771 affects Apple macOS Messages/iMessage group handling. The issue allowed a user removed from an iMessage group to rejoin the group, indicating a logic/permission flaw in group membership management. Apple fixed this in macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and ...

4.3CVSS4.8AI score0.00546EPSS
Exploits0References1Affected Software2
CNNVD
CNNVD
added 2021/02/02 12:0 a.m.8 views

Apple macOS Security Breach

Apple macOS is a proprietary operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS due to an incorrect access restriction within the Messages component of macOS. A remote user who is removed from an iMessage group can rejoin the group. The...

4.3CVSS5.8AI score0.00546EPSS
Exploits0References4
Wired Threat Level
Wired Threat Level
added 2021/01/30 12:0 p.m.60 views

Apple Fixes One of the iPhone's Most Pressing Security Risks

By hardening iMessage in iOS 14, the company has effectively cut off what had been an increasingly popular line of attack...

1.6AI score
Exploits0
ThreatPost
ThreatPost
added 2021/01/29 4:52 p.m.163 views

Apple iOS 14 Thwarts iMessage Attacks With BlastDoor System

In an effort to prevent attacks from being launched via its iMessage feature, Apple has debuted a security service called BlastDoor in iOS 14, its current mobile operating system version. First detailed in an analysis this week by Google Project Zero’s Samuel Groß, BlastDoor acts as a “tightly...

7.2AI score
Exploits0References13
Schneier on Security
Schneier on Security
added 2021/01/29 3:20 p.m.29 views

New iMessage Security Features

Apple has added added security features to mitigate the risk of zero-click iMessage attacks. Apple did not document the changes but Groß said he fiddled around with the newest iOS 14 and found that Apple shipped a "significant refactoring of iMessage processing" that severely cripples the usual...

1.3AI score
Exploits0
The Hacker News
The Hacker News
added 2021/01/29 2:59 p.m.39 views

Google uncovers new iOS security feature Apple quietly added after zero-day attacks

Google Project Zero on Thursday disclosed details of a new security mechanism that Apple quietly added to iOS 14 as a countermeasure to prevent attacks that were recently found to leverage zero-days in its messaging app. Dubbed "BlastDoor," the improved sandbox system for iMessage data was...

0.2AI score
Exploits0
The Hacker News
The Hacker News
added 2021/01/29 2:59 p.m.4 views

Google uncovers new iOS security feature Apple quietly added after zero-day attacks

Google Project Zero on Thursday disclosed details of a new security mechanism that Apple quietly added to iOS 14 as a countermeasure to prevent attacks that were recently found to leverage zero-days in its messaging app. Dubbed "BlastDoor ," the improved sandbox system for iMessage data was...

5.9AI score
Exploits0
Rows per page
Query Builder