Examining Pointer Authentication on the iPhone XS

Posted by Brandon Azad, Project Zero In this post I examine Apple's implementation of Pointer Authentication on the A12 SoC used in the iPhone XS, with a focus on how Apple has improved over the ARM standard. I then demonstrate a way to use an arbitrary kernel read/write primitive to forge kernel...

Apple iOS, watchOS and macOS Mojave Natural Language Processing Denial of Service Vulnerability

Apple iOS, watchOS, and macOS Mojave are products of Apple Inc. Apple iOS is an operating system for mobile devices; watchOS is an operating system for smartwatches; and macOS Mojave is a specialized operating system for Mac computers. Natural Language Processing is one of the natural language...

iPhone FaceTime Vulnerability

This is kind of a crazy iPhone vulnerability: it's possible to call someone on FaceTime and listen on their microphone -- and see from their camera -- before they accept the call. This is definitely an embarrassment, and Apple was right to disable Group FaceTime until it's fixed. But it's hard to...

Apple Disables Group FaceTime Following Major Privacy Glitch

Apple has made Group FaceTime temporarily unavailable following a major flaw discovered on Monday evening. The bug allows anyone with iOS to FaceTime other iOS users and listen in on their private conversations – without the user on other end rejecting or accepting the call. The bug makes use of ...

New FaceTime Bug Lets Callers Hear and See You Without You Picking Up

If you own an Apple device, you should immediately turn OFF FaceTime app for a few days. A jaw-dropping unpatched privacy bug has been uncovered in Apple's popular video and audio call app FaceTime that could let someone hear or see you before you even pick up your call. The bug is going viral on...

iPhone FaceTime call vulnerability alerts-a vulnerability alert-the black bar safety net

Recently, 360CERT monitor to iPhone FaceTime calls appear privacy disclosure vulnerability. The vulnerability allowed the attacker in the victim to answer the FaceTime call before to get murdered in the audio, resulting in user privacy leakage. Currently, Apple has suspended the FaceTime service,...

Hacker demonstrates how to remotely Jailbreak iPhone X

By Waqas A China-based security researcher associated with the Qihoo 360 Vulcan Team has published a proof-of-concept exploit for a kernel vulnerability, which he claims to be the second stage of an exploit chain that he was successfully able to jailbreak iPhone X remotely. The researcher Qixun...

'Chaos' iPhone X Attack Alleges Remote Jailbreak

A Chinese security researcher has published what he claims is a proof-of-concept exploit that would allow a remote attacker to jailbreak an iPhoneX, unbeknownst to the user – allowing them to gain access to a victim’s data, processing power and more. Qixun Zhao of Qihoo 360 built the exploit, whi...

Chinese Hacker Publishes PoC for Remote iOS 12 Jailbreak On iPhone X

Here we have great news for all iPhone Jailbreak lovers and concerning one for the rest of iPhone users. A Chinese cybersecurity researcher has today revealed technical details of critical vulnerabilities in Apple Safari web browser and iOS that could allow a remote attacker to jailbreak and...

Chinese Hacker Publishes PoC for Remote iOS 12 Jailbreak On iPhone X

Here we have great news for all iPhone Jailbreak lovers and concerning one for the rest of iPhone users. A Chinese cybersecurity researcher has today revealed technical details of critical vulnerabilities in Apple Safari web browser and iOS that could allow a remote attacker to jailbreak and...

Twitter bug exposed private tweets of Android users to public for years

By Carolina A security bug in Twitter exposed private tweets of users to the public. The flaw only affected Android users of the Twitter app while iPhone users were not affected. According to Twitter, private tweets of users from November 3, 2014, to January 14, 2019, were exposed. Although the...

CVE-2016-7576

In iOS before 9.3.3, a memory corruption issue existed in the kernel. This issue was addressed through improved memory handling...

A YubiKey for iOS Will Soon Free Your iPhone From Passwords

Yubico has finally gotten the green light from Apple to make a hardware authentication token that works on iPhones and iPads...

iOS devices failing to enrol via NetScaler after upgrade to 11.1 60.13

After upgrading NetScaler to 11.1 60.13, iOS devices are no longer able to enroll However, Android devices are not affected. iPhone X can enroll but can't access the Store iPhone 7 can't enroll at all Checking the logs, we would be able to see the below, when iOS attempts to enroll: "AAA Client...

Apple Security Update: iOS 12.1.2

Apple recommends to install security update iOS 12.1.2 on devices iPhone 5s and later...

Apple Security Update: iOS 12.1.2

Apple recommends to install security update iOS 12.1.2 on devices iPhone 5s and later...

Apple iOS, tvOS and macOS Mojave Airport Type Obfuscation Vulnerability

Apple iOS, tvOS, and macOS Mojave are products of Apple Inc. Apple iOS is an operating system for mobile devices; tvOS is an operating system for smart TVs; and macOS Mojave is a specialized operating system for Mac computers.Airport is one of the Airport is one of the wireless access components....

New Scam Apps Take Advantage of iPhone Touch ID

Touch ID is seamless, which makes it great for unlocking your phone—and for App Store scammers...

CVE-2017-8248

A buffer overflow may occur in the processing of a downlink NAS message in Qualcomm Telephony as used in Apple iPhone 5 and later, iPad 4th generation and later, iPod touch 6th generation...

iphonejailbreakguide.com XSS vulnerability

Open Bug Bounty ID: OBB-702209 Description| Value ---|--- Affected Website:| iphonejailbreakguide.com Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| hidden until disclosure Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:...