Apple iOS Time has an unspecified vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices.Time component is one of the time components. A security vulnerability exists in the Time component of Apple iOS prior to version 11, which arises from the possibility that the program fails to properly handle the use of...

UBUNTU-CVE-2017-7107

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to...

Apple iOS 10.2 (14C92) - Remote Code Execution

Apple iOS 10.2 14C92 - Remote Code Execution Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1317c3 The exploit achieves R/W access to the host's physical memory. This exploit has been tested on the iPhone 7, iOS 10.2 14C92. To run the exploit against different devices or...

Apple Allows Uber to Use a Powerful Feature that Lets it Record iPhone Screen

If you are an iPhone user and use Uber app, you would be surprised to know that widely popular ride-hailing app can record your screen secretly. Security researcher Will Strafach recently revealed that Apple selectively grants what's known as an "entitlement" Uber a powerful ability to use the...

October 3, 2017 – Morning Cyber Coffee Headlines – “Tom Petty” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! October 3, 2017 - Headlines Equifax Says Cyber Attack May Have Hit 2.5 Million...

Over The Air - Vol. 2, Pt. 2: Exploiting The Wi-Fi Stack on Apple Devices

Posted by Gal Beniamini, Project Zero In this blog post we’ll continue our journey towards over-the-air exploitation of the iPhone, by means of Wi-Fi communication alone. This part of the research will focus on the firmware running on Broadcom’s Wi-Fi SoC present on the iPhone 7. We’ll begin by...

Judge: FBI Can Keep iPhone Crack and Price Secret

The FBI can keep secret the controversial details about how much it paid and who it hired to unlock a terrorist’s iPhone 5C in 2016. In a judgment .PDF released late Saturday, Judge Tanya Chutkan for the United States District Court for the District of Columbia, sided with the FBI’s reasoning tha...

Judge: FBI Doesn't Have to Reveal How It Unlocked iPhone Used by San Bernardino Terrorist

Remember the infamous encryption fight between the FBI and Apple for unlocking an iPhone belonging to terrorist Syed Farook behind the San Bernardino 2015 mass shooting that killed 14 people? The same Apple vs. FBI case where Apple refused to help feds access data on the locked iPhone and, later...

Broadcom: Heap overflow when handling 802.11v WNM Sleep Mode Response(CVE-2017-7065)

Broadcom produces Wi-Fi HardMAC SoCs which are used to handle the PHY and MAC layer processing. These chips are present in both mobile devices and Wi-Fi routers, and are capable of handling many Wi-Fi related events without delegating to the host OS. In order to allow clients to configure...

Google Researcher Publishes PoC Exploit for Apple iPhone Wi-Fi Chip Hack

You have now another good reason to update your iPhone to newly released iOS 11—a security vulnerability in iOS 10 and earlier now has a working exploit publicly available. Gal Beniamini, a security researcher with Google Project Zero, has discovered a security vulnerability CVE-2017-11120 in...

Apple iOS Wi-Fi SQLite Arbitrary Code Execution Vulnerability

Apple iOS is an operating system developed for mobile devices. A security vulnerability exists in Apple iOS SQLite, which allows remote attackers to exploit the vulnerability to submit a special request that could crash an application or execute arbitrary code...

Apple iOS 10.2 - Broadcom Out-of-Bounds Write when Handling 802.11k Neighbor Report Response

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1289 The exploit gains code execution on the Wi-Fi firmware on the iPhone 7. The exploit has been tested against the Wi-Fi firmware as present on iOS 10.2 14C92, but should work on all versions of iOS up to 10.3.3 included. However...

Apple iOS Exchange ActiveSync Authentication Vulnerability

Apple iOS is an operating system developed by Apple for mobile devices.Exchange ActiveSync is one of the Microsoft Exchange synchronization protocols. A security vulnerability exists in the Exchange ActiveSync component in versions of Apple iOS prior to 11. A remote attacker can exploit this...

Apple iOS and Safari WebKit Cross-Site Scripting Vulnerability

Apple iOS, Safari, and iCloud for Windows are products of Apple Inc. Apple iOS is a suite of operating systems developed for mobile devices; Safari is a web browser that is the default browser shipped with the Mac OS X and iOS operating systems. iCloud for iCloud for Windows is a cloud service...

Another iPhone Change to Frustrate the Police

I recently wrote about the new ability to disable the Touch ID login on iPhones. This is important because of a weirdness in current US law that protects people's passcodes from forced disclosure in ways it does not protect actions: being forced to place a thumb on a fingerprint reader. There's...

Unable to access HDX apps from XenApp. Error "HdxSdkErrorDomain_Session error 8."

Unable to access the XA application. Error on the device : iPhone: "HdxSdkErrorDomainSession error 8." iPad: "The session launch ended; either the session was not visible to the user, or the ICA engine did not load properly"...

A $500 Device can Crack iPhone 6 and 7 Passcodes within Minutes

By Uzair Amir If you remember the FBI paid millions of dollars to Israeli This is a post from HackRead.com Read the original post: A $500 Device can Crack iPhone 6 and 7 Passcodes within Minutes...

Buffer overflow

A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation...

CVE-2017-8248

CVE-2017-8248 affects Apple iPhone 5 and later, iPad 4th generation and later, and iPod touch 6th generation. The Telephony component’s downlink NAS message processing has a buffer overflow vulnerability, enabling a remote attacker in a privileged network position to execute arbitrary code. Apple...

Gmail for iOS Adds Anti-Phishing Feature that Warns of Suspicious Links

Phishing — is an older style of cyber-attack but remains one of the most common and efficient attack vectors for attackers, as a majority of banking malware and various ransomware attacks begin with a user clicking on a malicious link or opening a dangerous attachment in an email. Phishing has...