10-year-old kid uses his face to unlock mom’s iPhone X with Face ID

By Waqas When iPhone X was launched, Apple claimed its Face ID This is a post from HackRead.com Read the original post: 10-year-old kid uses his face to unlock moms iPhone X with Face ID...

November 14, 2017 – Morning Cyber Coffee Headlines – “Hole Punch” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! November 14, 2017 - Headlines Carbon Black in the News: Carbon Black taps...

Apple iPhone X Face ID Fooled by a Mask

Apple’s Face ID technology, the centerpiece biometric authentication mechanism for the iPhone X, has been cracked a little more than a week after it was introduced to the public. Researchers from Vietnamese security company Bkav demonstrated that they could fool the technology to unlock the phone...

The vulnerability of Wi-Fi operating system components in Mac OS X and iOS allows a hacker to execute arbitrary code in a privileged context or cause a service failure.

The vulnerability of Wi-Fi operating system components such as Mac OS X and iOS arises from the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure memory corruption ...

The vulnerability of the Wi-Fi component of the iOS operating system allows a hacker to trigger a service failure or execute arbitrary code in a privileged context.

The vulnerability of the iOS operating system’s Wi-Fi component arises from an operation that occurs outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or cause a service failure memory corruption by using specially...

The vulnerability of the SQLite component in operating systems such as Mac OS X and iOS, as well as in the iCloud service, allows a malicious actor to execute arbitrary code in a privileged context or cause a service failure.

The vulnerability of the SQLite component in operating systems such as Mac OS X and iOS, as well as in the iCloud service, arises from operations that occur outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged contexts or cau...

The vulnerability of the Exchange ActiveSync component of the iOS operating system allows a hacker to delete data from the device.

The vulnerability of the Exchange ActiveSync component of the iOS operating system is related to improper handling of permissions during account setup. Exploiting this vulnerability allows a malicious actor to delete data from the device during account setup, by capturing the open AutoDiscover V1...

The vulnerability of the SQLite component in Mac OS X and iOS operating systems allows a hacker to cause a service failure.

The vulnerability of the SQLite component in Mac OS X and iOS operating systems arises from the execution of operations beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a malicious actor to cause service failures remotely...

The vulnerability of the Kernel component in Mac OS X and iOS operating systems allows attackers to execute arbitrary code in a privileged context or cause service interruptions.

The vulnerability of the Kernel component in Mac OS X and iOS operating systems arises from the execution of an operation outside the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or cause a service failure memory...

Apple iPhone X's Face ID Hacked (Unlocked) Using 3D-Printed Mask

Just a week after Apple released its brand new iPhone X on November 3, a team of hackers has claimed to successfully hack Apple's Face ID facial recognition technology with a mask that costs less than $150. Yes, Apple's "ultra-secure" Face ID security for the iPhone X is not as secure as the...

CVE-2017-13805

An issue was discovered in certain Apple products. iOS before 11.1 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to obtain sensitive information via a Siri request for private-content notifications that should not have been available in the...

CVE-2017-13799

An issue was discovered in certain Apple products. iOS before 11.1 is affected. macOS before 10.13.1 is affected. tvOS before 11.1 is affected. watchOS before 4.1 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause...

DEBIAN-CVE-2017-13788

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote...

DEBIAN-CVE-2017-13794

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote...

All it took for researchers was a mask to bypass iPhone X Face ID

By Waqas Apple Inc. introduced Face ID facial recognition system on September This is a post from HackRead.com Read the original post: All it took for researchers was a mask to bypass iPhone X Face ID...

tout-pour-iphone.com XSS vulnerability

Open Bug Bounty ID: OBB-392927 Description| Value ---|--- Affected Website:| tout-pour-iphone.com Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Remediation Guide:| OWASP XSS Prevention...

Mobile Pwn2Own: Hackers pwn iPhone, Huawei, Galaxy and Pixel Phone

By Waqas At the Mobile Pwn2Own competition 2017, white hat hackers managed This is a post from HackRead.com Read the original post: Mobile Pwn2Own: Hackers pwn iPhone, Huawei, Galaxy and Pixel Phone...

Chain of 11 Bugs Takes Down Galaxy S8 at Mobile Pwn2Own

The mobile version of the annual Pwn2Own contest wrapped up today in Tokyo with an unprecedented attack chain leveling the Samsung Galaxy S8. Researchers from MWR Labs used 11 vulnerabilities across six different mobile applications to execute code on Samsung’s flagship device and exfiltrate data...

WhatsApp 2.17.52 - Memory Corruption Exploit

Exploit for iOS platform in category dos / poc !/usr/bin/env python -- coding: utf-8 -- Found this and more exploits on my open source security project: http://www.exploitpack.com Exploit Author: Juan Sacco at KPN Red Team - http://www.kpn.com Date and time of release: 11 October 2017 Tested on:...

Apple iOS Messages Photo Access Vulnerability

Apple iOS is an operating system for mobile devices developed by Apple Inc. Messages is a component of the application used to send text, photos and videos. A photo access vulnerability exists in the Messages component in Apple iOS versions prior to 11.1. An attacker in close physical proximity...