4462 matches found
Faking an iPhone Reboot
Researchers have figured how how to intercept and fake an iPhone reboot: Well dissect the iOS system and show how its possible to alter a shutdown event, tricking a user that got infected into thinking that the phone has been powered off, but in fact, its still running. The "NoReboot" approach...
Apple iPadOS 输入验证错误漏洞
Apple iPadOS is a suite of operating systems for the iPad tablet computer from Apple USA. An input validation error vulnerability exists in Apple iOS and iPadOS that stems from the handling of maliciously crafted HomeKit accessory names could result in a denial of service...
A week in security (January 3 – 9)
Last week on Malwarebytes Labs: Ransomware attacks Finalsite, renders 8,000 school sites unreachable for days Patchwork APT caught in its own web Sophisticated phishing scheme spent years robbing authors of their unpublished work Google and Facebook fined $240 million for making cookies hard to...
How to Read Your iOS 15 App Privacy Report
Your iPhone now gives you lots of transparency into what your downloads are up to. Here's what to look out for...
This Week in Security News - January 7, 2022
This week, read about Log4j vulnerabilities in connected cars and charging stations and how iOS malware can fake iPhone shutdowns to snoop on cameras and microphones...
New iPhone malware spies via camera when device appears off
When removing malware from an iOS device, it is said that users need to restart the device to clear the malware from memory. That is no longer the case. Security researchers from ZecOps have created a new proof-of-concept PoC iPhone Trojan capable of doing "fun" things. Not only can it fake a...
Apple iPhone Malware Tactic Causes Fake Shutdowns to Enable Spying
In the world of mobile malware, simply shutting down a device can often wipe out any bad code, given that persistence after rebooting is a challenge for traditional malicious activity. But a new iPhone technique can hijack and prevent any shut-down process that a user initiates, simulating a real...
New Trick Could Let Malware Fake iPhone Shutdown to Spy on Users Secretly
Researchers have disclosed a novel technique by which malware on iOS can achieve persistence on an infected device by faking its shutdown process, making it impossible to physically determine if an iPhone is off or otherwise. The discovery — dubbed "NoReboot" — comes courtesy of mobile security...
CVE-2017-13880
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 11.2, watchOS 4.2. An application may be able to execute arbitrary code with kernel privilege...
The vulnerability of the Crash Reporter component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows a hacker to modify any files they desire.
The vulnerability of the Crash Reporter component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to deficiencies in access control. Exploiting this vulnerability could allow an attacker to modify arbitrary files...
The vulnerability of the Identity Service in operating systems such as tvOS, iOS, iPadOS, and watchOS allows a hacker to bypass security restrictions.
The vulnerability of the Identity Service for operating systems tvOS, iOS, iPadOS, and watchOS is related to incorrect code generation. Exploiting this vulnerability can allow attackers to circumvent security restrictions...
The vulnerability of Microsoft Edge browser on the iOS operating system, related to bypassing authentication through spoofing, allows attackers to carry out spoofing attacks.
The vulnerability of Microsoft Edge browser on the iOS operating system is related to the ability to bypass authentication through spoofing. Exploiting this vulnerability allows a malicious actor to carry out spoofing attacks remotely...
The vulnerability of the Preferences component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS allows attackers to increase their privileges.
The vulnerability of the Preferences component in operating systems such as Mac OS, tvOS, iOS, iPadOS, and watchOS is related to deficiencies in path name checking for restricted access directories. Exploiting this vulnerability can allow attackers to gain increased privileges...
A deep dive into an NSO zero-click iMessage exploit: Remote Code Execution
Posted by Ian Beer & Samuel Groß of Google Project Zero We want to thank Citizen Lab for sharing a sample of the FORCEDENTRY exploit with us, and Apple’s Security Engineering and Architecture SEAR group for collaborating with us on the technical analysis. The editorial opinions reflected below ar...
NSO Group spyware found on iPhones of US State Department employees
iPhones of at least nine US State Department employees are said to have been hacked using the Pegasus spyware developed by the Israeli technology company, NSO Group. Pegasus is a proprietary and sophisticated spyware capable of the remote surveillance of smartphones. The employees targeted by an...
The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit operating systems for iOS, related to the use of memory after it is freed, allows attackers to execute arbitrary code.
The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS operating systems is related to the use of memory after it is freed during the processing of malicious web content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...
The vulnerability of FaceTime video/audio call technology in operating systems macOS and iOS allows a perpetrator to gain unauthorized access to protected information.
The vulnerability of FaceTime video/audio calls in macOS and iOS operating systems lies in the fact that the call operations go beyond the buffer in memory during group calls. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...
Apple Security Update: iOS 15.1.1
Apple recommends to install security update iOS 15.1.1 on devices iPhone 12 and later...
The vulnerability of iOS, tvOS, and watchOS operating systems lies in a logical error during authentication processes, which allows attackers to bypass authenticity checks.
The vulnerability of iOS, tvOS, and watchOS operating systems is related to a logical error during the authentication process. Exploiting this vulnerability can allow an attacker to bypass authenticity checks...
