Lucene search
+L

268 matches found

Schneier on Security
Schneier on Security
added 2021/09/01 11:14 a.m.28 views

Zero-Click iPhone Exploits

Citizen Lab is reporting on two zero-click iMessage exploits, in spyware sold by the cyberweapons arms manufacturer NSO Group to the Bahraini government. These are particularly scary exploits, since they dont require to victim to do anything, like click on a link or open a file. The victim receiv...

0.5AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2021/08/26 4:27 p.m.158 views

Latest iPhone exploit, FORCEDENTRY, used to launch Pegasus attack against Bahraini activists

Researchers from Citizen Lab, an academic research and development lab based in the University of Toronto in Canada, has recently discovered that an exploit affecting iMessage is being used to target Bahraini activists with the Pegasus spyware. The Bahrain government and groups linked to them—suc...

0.3AI score
SaveExploits0
Wired Threat Level
Wired Threat Level
added 2021/08/25 9:14 p.m.25 views

The Stealthy iPhone Hacks That Apple Still Can't Stop

After another “zero-click” attack, security experts say it's time for more extreme measures to keep iMessage users safe...

2.7AI score
SaveExploits0
OSV
OSV
added 2021/08/24 7:15 p.m.13 views

CVE-2021-30904

A sync issue was addressed with improved state validation. This issue is fixed in macOS Monterey 12.0.1. A user's messages may continue to sync after the user has signed out of iMessage...

5.3CVSS5.8AI score0.00804EPSS
SaveExploits0References1
NVD
NVD
added 2021/08/24 7:15 p.m.20 views

CVE-2021-30904

A sync issue was addressed with improved state validation. This issue is fixed in macOS Monterey 12.0.1. A user's messages may continue to sync after the user has signed out of iMessage...

5.3CVSS0.00804EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/08/24 7:15 p.m.8 views

CVE-2021-30904

A sync issue was addressed with improved state validation. This issue is fixed in macOS Monterey 12.0.1. A user's messages may continue to sync after the user has signed out of iMessage...

5.3CVSS6.1AI score0.00804EPSS
SaveExploits0References2
Prion
Prion
added 2021/08/24 7:15 p.m.23 views

Input validation

A sync issue was addressed with improved state validation. This issue is fixed in macOS Monterey 12.0.1. A user's messages may continue to sync after the user has signed out of iMessage...

5CVSS5AI score0.00804EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2021/08/24 6:50 p.m.33 views

CVE-2021-30904

A sync issue was addressed with improved state validation. This issue is fixed in macOS Monterey 12.0.1. A user's messages may continue to sync after the user has signed out of iMessage...

6AI score0.00804EPSS
SaveExploits0References1
CVE
CVE
added 2021/08/24 6:50 p.m.72 views

CVE-2021-30904

CVE-2021-30904 affects macOS Monterey 12.0.x in the Apple Messages sync flow. The issue is a sync/state validation bug that could allow a user’s messages to continue syncing after signing out of iMessage. Apple fixed this in macOS Monterey 12.0.1 (per HT212869). Connected feeds corroborate the de...

5.3CVSS5.5AI score0.00804EPSS
SaveExploits0References1Affected Software1
ThreatPost
ThreatPost
added 2021/08/24 5:51 p.m.50 views

Pegasus Spyware Uses iPhone Zero-Click iMessage Zero-Day

A never-before-seen, zero-click iMessaging exploit has been allegedly used to illegally spy on Bahraini activists with NSO Group’s Pegasus spyware, according to cybersecurity watchdog Citizen Lab. The digital researchers are calling the new iMessaging exploit FORCEDENTRY. In a report published on...

6.8AI score
SaveExploits0References23
The Hacker News
The Hacker News
added 2021/08/24 12:08 p.m.47 views

Bahraini Activists Targeted Using a New iPhone Zero-Day Exploit From NSO Group

A previously undisclosed "zero-click" exploit in Apple's iMessage was abused by Israeli surveillance vendor NSO Group to circumvent iOS security protections and target nine Bahraini activists. "The hacked activists included three members of Waad a secular Bahraini political society, three members...

0.2AI score
SaveExploits0
CNNVD
CNNVD
added 2021/08/24 12:00 a.m.11 views

Apple macOS 安全漏洞

Apple macOS is a specialized operating system developed by Apple Inc. for Mac computers. A security vulnerability exists in Apple macOS Monterey before 12.0.1. The vulnerability stems from the possibility that a user's messages may continue to synchronize after the user exits iMessage...

5.3CVSS5.8AI score0.00804EPSS
SaveExploits0References1
Schneier on Security
Schneier on Security
added 2021/08/10 11:37 a.m.36 views

Apple Adds a Backdoor to iMessage and iCloud Storage

Apples announcement that its going to start scanning photos for child abuse material is a big deal. Here are five news stories. I have been following the details, and discussing it in several different email lists. I dont have time right now to delve into the details, but wanted to post something...

7.4AI score
SaveExploits0
Malwarebytes
Malwarebytes
added 2021/08/06 9:10 p.m.80 views

Apple’s search for child abuse imagery raises serious privacy questions

The Internet has been on fire since the August 4 discovery disclosed publicly by Mathew Green that Apple will be monitoring photos uploaded to iCloud for child sexual abuse material CSAM. Some see this as a great move by Apple that will protect children. Others view this as a potentially dangerou...

6.7AI score
SaveExploits0
HackRead
HackRead
added 2021/05/18 7:05 p.m.37 views

Here are 5 MacBook Hacks that You Must Know

By Waqas MacBook hacks are endless. There is AirDrop, there is iMessage; the options are limitless but here are 5 quick hacks to make the best out of a MacBook. This is a post from HackRead.com Read the original post: Here are 5 MacBook Hacks that You Must Know...

0.8AI score
SaveExploits0
OSV
OSV
added 2021/04/02 6:15 p.m.12 views

CVE-2021-1771

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. A user that is removed from an iMessage group could rejoin the group...

3.3CVSS5.8AI score0.00546EPSS
SaveExploits0References1
NVD
NVD
added 2021/04/02 6:15 p.m.24 views

CVE-2021-1771

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. A user that is removed from an iMessage group could rejoin the group...

4.3CVSS0.00546EPSS
SaveExploits0References1
ATTACKERKB
ATTACKERKB
added 2021/04/02 6:15 p.m.6 views

CVE-2021-1771

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. A user that is removed from an iMessage group could rejoin the group...

4.3CVSS5.4AI score0.00546EPSS
SaveExploits0References2
Prion
Prion
added 2021/04/02 6:15 p.m.23 views

Design/Logic Flaw

This issue was addressed with improved checks. This issue is fixed in macOS Big Sur 11.2, Security Update 2021-001 Catalina, Security Update 2021-001 Mojave. A user that is removed from an iMessage group could rejoin the group...

4.3CVSS4.1AI score0.00546EPSS
SaveExploits0References1Affected Software2
CVE
CVE
added 2021/04/02 5:56 p.m.93 views

CVE-2021-1771

CVE-2021-1771 affects Apple macOS Messages/iMessage group handling. The issue allowed a user removed from an iMessage group to rejoin the group, indicating a logic/permission flaw in group membership management. Apple fixed this in macOS Big Sur 11.2 and Security Update 2021-001 for Catalina and ...

4.3CVSS4.8AI score0.00546EPSS
SaveExploits0References1Affected Software2
Rows per page
Query Builder