NSO Group spyware found on iPhones of US State Department employees

iPhones of at least nine US State Department employees are said to have been hacked using the Pegasus spyware developed by the Israeli technology company, NSO Group. Pegasus is a proprietary and sophisticated spyware capable of the remote surveillance of smartphones. The employees targeted by an...

The vulnerability of the web page rendering modules in WebKitGTK and WPE WebKit operating systems for iOS, related to the use of memory after it is freed, allows attackers to execute arbitrary code.

The vulnerability of the web page rendering modules in WebKitGTK and WPE for iOS operating systems is related to the use of memory after it is freed during the processing of malicious web content. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of FaceTime video/audio call technology in operating systems macOS and iOS allows a perpetrator to gain unauthorized access to protected information.

The vulnerability of FaceTime video/audio calls in macOS and iOS operating systems lies in the fact that the call operations go beyond the buffer in memory during group calls. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information...

Apple Security Update: iOS 15.1.1

Apple recommends to install security update iOS 15.1.1 on devices iPhone 12 and later...

The vulnerability of iOS, tvOS, and watchOS operating systems lies in a logical error during authentication processes, which allows attackers to bypass authenticity checks.

The vulnerability of iOS, tvOS, and watchOS operating systems is related to a logical error during the authentication process. Exploiting this vulnerability can allow an attacker to bypass authenticity checks...

CVE-2021-43188

In JetBrains YouTrack Mobile before 2021.2, access token protection on iOS is incomplete...

CVE-2021-43187

In JetBrains YouTrack Mobile before 2021.2, the client-side cache on iOS could contain sensitive information...

JetBrains YouTrack 安全漏洞

JetBrains YouTrack is a browser-based bug tracking and project management software from JetBrains Czech Republic. The software features bug tracking, creating workflows, and monitoring project progress.JetBrains YouTrack Mobile 2021.2 previously had a security vulnerability that stemmed from...

CVE-2021-30831

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15, watchOS 8, iOS 15 and iPadOS 15. Processing a maliciously crafted font may result in the disclosure of process memory...

NYT Journalist Repeatedly Hacked with Pegasus after Reporting on Saudi Arabia

The iPhone of New York Times journalist Ben Hubbard was repeatedly hacked with NSO Group's Pegasus spyware tool over a three-year period stretching between June 2018 to June 2021, resulting in infections twice in July 2020 and June 2021. The University of Toronto's Citizen Lab, which publicized t...

Nong Ge File Explorer 授权问题漏洞

Nong Ge File Explorer is a privacy application by Nong Ge Personal Developer for organizing and viewing all files on your Iphone or Ipad. A security vulnerability exists in Nong Ge File Explorer that stems from an issue with the authentication mechanism that allows access to sensitive data withou...

Vulnerability of operating systems iPadOS, tvOS, iOS, and the browser Safari, caused by a full overflow of integers, allowing attackers to execute arbitrary code.

The vulnerability of operating systems such as iPadOS, tvOS, iOS, and the Safari browser is due to a numerical overflow condition. Exploiting this vulnerability allows an attacker to execute arbitrary code remotely...

Vulnerability of operating systems iPadOS, watchOS, iOS, Mac OS, caused by integer overflow, allowing attackers to execute arbitrary code

The vulnerabilities of operating systems iPadOS, watchOS, iOS, and Mac OS are caused by a numerical overflow. Exploiting these vulnerabilities allows an attacker to execute arbitrary code on the target system by opening a PDF file...

The vulnerability of operating systems iPadOS, iOS, and Mac OS, related to the use of memory after it is freed, allows attackers to execute arbitrary code.

The vulnerability of operating systems iPadOS, iOS, and Mac OS is related to the use of memory after it is freed. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

The vulnerability of the iOS operating system and the iPadOS operating system is caused by a numerical overflow that allows an attacker to escalate their privileges.

The vulnerability of the iOS operating system and the iPadOS operating system is caused by a numerical overflow. Exploiting this vulnerability can allow an attacker to increase their privileges...

CVE-2021-30847

This issue was addressed with improved checks. This issue is fixed in watchOS 8, macOS Big Sur 11.6, Security Update 2021-005 Catalina, tvOS 15, iOS 15 and iPadOS 15, iTunes 12.12 for Windows. Processing a maliciously crafted image may lead to arbitrary code execution...

iPhone 13 Pro, Windows, Chrome, Linux and others pwned at Tianfu Cup

By Waqas Tianfu Cup is the Chinese version of the Pwn2own in Kunlun Lab managed to secure first place by hacking iPhone 13. This is a post from HackRead.com Read the original post: iPhone 13 Pro, Windows, Chrome, Linux and others pwned at Tianfu Cup...

How to fix iPhone boot loop and iPhone black screen by yourself

By Owais Sultan iPhone boot loop has become more prominent following the recent iOS upgrades. Worse, you might even experience an iPhone black screen. This is a post from HackRead.com Read the original post: How to fix iPhone boot loop and iPhone black screen by yourself...

Vulnerability of operating systems macOS, watchOS, iOS, and iPadOS, related to initialization errors, allowing attackers to disclose sensitive information

The vulnerabilities of operating systems macOS, watchOS, iOS, and iPadOS are related to initialization errors. Exploiting these vulnerabilities can allow attackers to disclose sensitive information that is protected by security measures...

The vulnerability of operating systems macOS, watchOS, iOS, and iPadOS, related to data type mixing errors, allows attackers to execute arbitrary code with superuser privileges.

The vulnerabilities of operating systems macOS, watchOS, iOS, and iPadOS are related to type confusion errors. Exploiting these vulnerabilities can allow attackers to execute arbitrary code with superuser privileges...