CVE-2019-13143

An HTTP parameter pollution issue was discovered on Shenzhen Dragon Brothers Fingerprint Bluetooth Round Padlock FB50 2.3. With the user ID, user name, and the lock's MAC address, anyone can unbind the existing owner of the lock, and bind themselves instead. This leads to complete takeover of the...

90% of Enterprise iPhone Users Open to iMessage Spy Attack

Over 90 percent of Apple iPhone users — consumer and enterprise — are still vulnerable to bugs in iOS that can be remotely exploited without any user interaction via the iMessage client. These could reveal pictures, videos, notes, PDFs and so on stored on the phone. Though Apple has fully patched...

Unpatched Flaws in IoT Smart Deadbolt Open Homes to Danger

UPDATE Researchers have uncovered vulnerabilities in a popular smart deadbolt could allow attackers to remotely unlock doors and break into homes. The manufacturer behind the smart lock, Hickory Hardware, has deployed patches to the affected apps on the Google Play Store and Apple App Store. The...

Black Hat USA 2019 Preview

Las Vegas – Despite bizarre reports of a grasshopper infestation, Black Hat USA 2019 and DEF CON are set to kick off next week in Las Vegas, bringing on a wave of sessions, keynotes and security-themed villages. The Threatpost team, which will be on the frontlines of next week’s shows, discuss wh...

Apple iOS, Apple tvOS and watchOS Core Data Component Resource Management Error Vulnerability

Apple iOS is an operating system developed for mobile devices. apple tvOS is a smart TV operating system. apple watchOS is a smart watch operating system. core data is one of the frameworks used to manage the model layer objects in an application. A resource management error vulnerability exists ...

Apple watchOS and iOS Messages have unspecified vulnerabilities

Apple iOS and Apple watchOS are both products of Apple Inc. Apple iOS is an operating system developed for mobile devices. apple watchOS is an operating system for smartwatches. messages is a component of the application used to send text, photos, and videos. A security vulnerability exists in th...

Unspecified Vulnerability in Apple iOS and watchOS Wallet

Apple iOS and Apple watchOS are both products of Apple Inc. Apple iOS is an operating system for mobile devices. apple watchOS is an operating system for smartwatches. wallet is a wallet application. A security vulnerability exists in the Wallet component of Apple iOS before 12.4 and watchOS befo...

Apple iOS, Apple macOS Mojave, and watchOS FaceTime Component Buffer Overflow Vulnerability

Apple iOS is an operating system developed for mobile devices.Apple macOS Mojave is a specialized operating system developed for Mac computers.Apple watchOS is a smartwatch operating system.FaceTime is one of the video calling software. A buffer overflow vulnerability exists in the FaceTime...

Apple Security Update: iOS 9.3.6

Apple recommends to install security update iOS 9.3.6 on devices iPhone 4s, iPad mini 1st generation Wi-Fi + Cellular, iPad 2 Wi-Fi + Cellular, iPad 3rd generation Wi-Fi + Cellular...

Apple Security Update: iOS 10.3.4

Apple recommends to install security update iOS 10.3.4 on devices iPhone 5, iPad 4th generation Wi-Fi + Cellular...

Apple Security Update: iOS 10.3.4

Apple recommends to install security update iOS 10.3.4 on devices iPhone 5, iPad 4th generation Wi-Fi + Cellular...

Apple Security Update: iOS 9.3.6

Apple recommends to install security update iOS 9.3.6 on devices iPhone 4s, iPad mini 1st generation Wi-Fi + Cellular, iPad 2 Wi-Fi + Cellular, iPad 3rd generation Wi-Fi + Cellular...

Apple Disables Walkie-Talkie App Due to Eavesdropping Flaw

Apple has temporarily disabled the Walkie-Talkie feature from the Apple Watch due to a vulnerability that could allow potential attackers to eavesdrop in on iPhone calls, a TechCrunch report said. The Apple Watch Walkie-Talkie app allows users to converse with friends in real-time, without having...

Workspace app for ios default display settings

This article is intended for Citrix administrators and technical teams only. Non-admin users must contact their company's Help Desk/IT support team and can refer to CTX297149 for more information. What is the default setting for Workspace app for iOS on iPhones? Display settings are not all the...

Powerful FinSpy Spyware Found Targeting iOS and Android Users in Myanmar

One of the most powerful, infamous, and advanced piece of government-grade commercial surveillance spyware dubbed FinSpy —also known as FinFisher —has been discovered in the wild targeting users in Myanmar. Created by German company Gamma International, FinSpy is spying software that can target...

OS Identification: iPhone or iPad

Only port 62078 is open on the remote host. It's highly likely to be an iPhone or an iPad. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid126588; scriptversion"1.3"; scriptcvsdate"Date: 2020/01/22"; scriptnameenglish:"OS Identification: iPhone or iPad";...

10 Powerful But Not Yet Promoted Antivirus for PC, Mac, Android, iPhone

By Lesley Haught The vulnerability of the regular computer user is at an all-time high. Not even the strongest of world governments have been able to stay safe from attacks, unauthorized accesses, and data leakages attempted by hackers, malware programs. The big question, then, that every compute...

Apple Patches iMessage Bug That Bricks iPhones with Out-of-Date Software

Apple patched a high-severity iMessage bug found by Google Project Zero that can be exploited by an attacker who sends a specially-crafted message to a vulnerable iOS device. Those iPhones receiving the malicious message are rendered inoperable, or bricked. Apple patched the bug with the release ...

libxslt CVE-2019-13118 Stack Buffer Overflow Vulnerability

Description libxslt is prone to a stack-based buffer-overflow vulnerability. An attacker can exploit this issue to obtain sensitive information that may aid in further attacks. libxslt 1.1.33 is vulnerable; other versions may also be affected. Technologies Affected Apple TV Apple Watch Apple iOS ...

Cellebrite Claims It Can Unlock Any iPhone

The digital forensics company Cellebrite now claims it can unlock any iPhone. I dithered before blogging this, not wanting to give the company more publicity. But I decided that everyone who wants to know already knows, and that Apple already knows. It's all of us that need to know...