PT-2023-28653 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS versions prior to Sonoma 14 watchOS versions prior to 10 tvOS versions prior to 17 Description: The issue allows an app to access edited photos saved to a temporary directory. This wa...

Apple iOS and iPadOS Security Vulnerabilities

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A security vulnerability exists in Apple iOS 17 and iPadOS 17, which arises from processing web content that may disclose...

Apple iOS and iPadOS Resource Management Error Vulnerability

Apple iOS and Apple iPadOS are products of Apple Inc. Apple iOS is an operating system developed for mobile devices, and Apple iPadOS is an operating system for iPad tablets. A resource management error vulnerability exists in Apple iOS 17 and iPadOS 17, which stems from the fact that handling we...

DEBIAN-CVE-2023-41993

The issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14. Processing web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7...

PT-2023-5656 · Apple · Macos Ventura +5

Name of the Vulnerable Software and Affected Versions: tvOS versions prior to 17 iOS versions prior to 17 iPadOS versions prior to 17 watchOS versions prior to 10 macOS Ventura versions prior to 13.6 Description: The issue is related to a use-after-free problem, which can allow an attacker to...

Apple Security Update: iOS 17.0.2

Apple recommends to install security update iOS 17.0.2 on devices iPhone 15 all models...

PT-2023-28203 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 13.6 macOS Monterey versions prior to 12.7 macOS Sonoma versions prior to 14 tvOS versions prior to 17 iOS versions prior to 16.7 iOS versions prior to 17 iPadOS versions prior to 16.7 iPadOS versions prior to 17 watch...

iphone-yukari.com Cross Site Scripting vulnerability OBB-3697185

Following the coordinated and responsible vulnerability disclosure guidelines of the ISO 29147 standard, Open Bug Bounty has: a. verified the vulnerability and confirmed its existence; b. notified the website operator about its existence. Technical details of the vulnerability are currently hidde...

Apple Security Update: iOS 17 and iPadOS 17

Apple recommends to install security update iOS 17 and iPadOS 17 on devices iPhone XS and later, iPad Pro 12.9-inch 2nd generation and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 6th generation and later, and iPad mini 5th generati...

PT-2025-16122 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: iOS versions prior to 17 iPadOS versions prior to 17 macOS Sonoma versions prior to 14 macOS Ventura versions prior to 13.6 macOS Monterey versions prior to 12.7 Description: An app may be able to break out of its sandbox due to improper...

iPhone 15 launch: Wonderlust scammers rear their heads

Yesterday, Apple launched its latest iPhone and Watch models at its massive Wonderlust event. As with many high profile launches like this, it attracted not just a mountain of press, but a whole load of scammers too. One site uses the Apple brand to host a cryptocurrency scam. The hook is a...

Upgrading your iPhone? Read this first

Apple's Wonderlust event on Tuesday saw the launch of the company's top-of-the-line iPhone 15 Pro Max with a titanium chassis and an improved telephoto camera, as well as other iPhone 15 models and new Apple Watches. Also this week, Apple was reportedly banned from selling the iPhone 12 in France...

Zero-Click Exploit in iPhones

Make sure you update your iPhones: Citizen Lab says two zero-days fixed by Apple today in emergency security updates were actively abused as part of a zero-click exploit chain dubbed BLASTPASS to deploy NSO Groups Pegasus commercial spyware onto fully patched iPhones. The two bugs, tracked as...

The vulnerability of the ImageIO component in operating systems such as MacOS, iOS, and iPadOS allows a hacker to execute arbitrary code.

The vulnerability of the ImageIO component in operating systems such as MacOS, iOS, and iPadOS relates to the execution of operations outside of the buffer during the processing of graphic files. Exploiting this vulnerability allows an attacker to execute arbitrary code...

CVE-2023-40442

A privacy issue was addressed with improved private data redaction for log entries. This issue is fixed in macOS Big Sur 11.7.9, iOS 15.7.8 and iPadOS 15.7.8, macOS Monterey 12.6.8. An app may be able to read sensitive location information...

Update NOW! Pegasus Spyware Exploit Found in iPhones Running Latest iOS

By Waqas If you are using an iPhone, it is time to update it to the latest version RIGHT NOW! This is a post from HackRead.com Read the original post: Update NOW! Pegasus Spyware Exploit Found in iPhones Running Latest iOS...

The vulnerability of operating systems such as watchOS, iOS, iPadOS, and macOS, related to deficiencies in access control, allows attackers to bypass existing security restrictions.

The vulnerabilities of operating systems such as watchOS, iOS, iPadOS, and macOS are related to deficiencies in access control. Exploiting these vulnerabilities can allow attackers to bypass existing security restrictions...

PT-2023-5027 · Apple · Ios +2

Name of the Vulnerable Software and Affected Versions: Apple iOS versions prior to 16.6.1 Apple iPadOS versions prior to 16.6.1 Apple watchOS versions prior to 9.6.2 Description: A validation issue was addressed with improved logic. This issue may result in arbitrary code execution when a...

The vulnerability of operating systems such as watchOS, iOS, iPadOS, and macOS lies in the lack of adequate warnings about dangerous actions, allowing attackers to circumvent existing security restrictions.

The vulnerability of operating systems such as watchOS, iOS, iPadOS, and macOS is related to insufficient warnings about dangerous actions. Exploiting this vulnerability can allow attackers to circumvent existing security restrictions...

Recapping the top stories from Black Hat and DEF CON

Welcome to this weeks edition of the Threat Source newsletter. I had a significant amount of FOMO last week seeing everyone out in Vegas. I was happy to not get conference crud sickness, but it seems like I missed a great time otherwise. But, as anyone who works with me could guess, I was followi...