JVN#11994518: Cybozu KUNAI App fails to verify SSL server certificates

Cybozu KUNAI App provided by Cybozu, Inc. fails to verify SSL server certificates. Impact A man-in-the-middle attack may allow an attacker to eavesdrop on an encrypted communication. Solution Update the Software Update to the latest version according to the information provided by the developer...

Motion Filed Asking FBI To Disclose Tor Browser Zero Day

Mozilla on Wednesday filed a motion with the U.S. District Court in Tacoma, Wa., asking the government to disclose a vulnerability it exploited in the Tor Browser and Firefox. The FBI used the zero-day to hack a child pornography site and de-anonymize users visiting the site using the Tor Browser...

For the First time, FBI discloses a Flaw to Apple, but it's already Patched!

In Brief The Federal Bureau of Investigation FBI made its first disclosure about a software security flaw to Apple under the Vulnerability Equities Process VEP, a White House initiative created in April 2014 for reviewing flaws and deciding which ones should be made public. Unfortunately, the...

Experts Weigh-In Over FBI $1.3 Million iPhone Payout

Was the Federal Bureau of Investigation justified in paying over $1.3 million for a hacking tool that opened the iPhone 5c of the San Bernardino shooter? For some in the security community the answer is a resounding yes. For others, the answer is not so clear-cut. FBI Director James Comey said on...

FBI paid Hacker $1.3 Million to Unlock San Bernardino Shooter's iPhone

In Brief Guess how much the FBI has paid an unknown grey-hat hacker to break into San Bernardino Shooter's iPhone? FBI Director James Comey hinted during an interview that the FBI spent more than $1.3 Million for breaking into the iPhone of a suspected terrorist and found nothing useful on it...

Report: Nothing useful found on San Bernardino Shooter's iPhone

The San Bernardino terrorist's iPhone that the Department of Justice DoJ and the Federal Bureau of Investigation FBI said was critical in their investigation has absolutely nothing useful on it, at least so far. Yes, the same iPhone that was subject of so much attention from the past few months...

The vulnerability of the iOS operating system allows attackers to bypass event handlers and modify events of arbitrary applications.

The vulnerability of the XPC Services software interface in the LaunchServices component of the iOS operating system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to bypass event handler restrictions and modify events of arbitrary application...

Forensic Firm that Unlocked Terrorist's iPhone 5C is Close to Crack iPhone 6

The FBI didn't disclose the identity of the third-party company that helped them access the San Bernardino iPhone, but it has been widely believed that the Israeli mobile forensic firm Cellebrite was hired by the FBI to put an end to the Apple vs. FBI case. For those unfamiliar in the Apple vs. F...

Apple iOS 9.3 S/Plus – touch password bypass vulnerability-vulnerability warning-the black bar safety net

! Description iOS is developed by Apple Phoneoperating system, published in 2 0 0 7 years use on the iPhone and iPod Touch, and has begun to extend to other Apple devices such as the iPad and Apple TV. With Microsoft's Windows Phone Windows CEand Google's Android systems, Apple does not authorize...

In Keynote Comey Challenges Absolute Privacy

The method the FBI used to unlock the San Bernardino killer’s iPhone 5C does not work on newer models, FBI Director James Comey told a crowd of students on Wednesday night. In a Q&A following a keynote address at Kenyon College’s Expectation of Privacy conference in Gambier, Ohio, Comey spoke...

FBI claims its iPhone Hacking Tool can't Unlock iPhone 5S, 6S and 6S Plus

Although everyone, including Apple, was worried about the iPhone hacking tool used by the Federal Bureau of Investigation FBI to access data on iPhone belonged to the San Bernardino shooter, the FBI director said the hack does not work on an iPhone 5S or later. FBI Director James Comey said...

The vulnerability of the WebKit component in the Safari browser and the iOS operating system allows a hacker to trigger a service failure.

The vulnerability of the History component implementation in WebKit of the Safari browser and the iOS operating system is related to resource management errors. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause a service failure application termination throug...

The vulnerability of Safari browser and iOS operating system allows attackers to obtain confidential information or circumvent existing access control policies.

The vulnerability of the Page Loading component implemented in WebKit of the Safari browser and the iOS operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor to circumvent existing access restrictions or obtain confidenti...

The vulnerability of Safari browser and iOS operating system allows attackers to circumvent port restrictions.

The vulnerability of the WebKit component in the Safari browser and the iOS operating system is related to access control deficiencies. Exploiting this vulnerability allows a malicious actor to bypass port restrictions by using a specially crafted website...

Vulnerabilities of iOS and Mac OS X operating systems, affecting the confidentiality of protected information

The vulnerability of iOS and Mac OS X operating systems is related to the improper functioning of the cryptographic protection mechanism. Exploiting this vulnerability allows a malicious actor to compromise the confidentiality of the information being protected remotely...

The vulnerabilities in iOS and Mac OS X operating systems allow attackers to trigger service failures or execute arbitrary code in privileged contexts.

The vulnerability of the kernel in iOS and Mac OS X operating systems arises due to buffer overflows. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context, or trigger a service failure memory corruption through a specially created application...

Apple iOS 9.3.1 Passcode Bypass

Document Title: =============== Apple iOS 9.3.1 iPhone 6S & iPhone Plus - 3D Touch Passcode Bypass Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1814 Release Date: ============= 2016-04-05 Vulnerability Laboratory ID VL-ID:...

The vulnerabilities in operating systems such as Mac OS X and iOS allow attackers to trigger service failures or execute arbitrary code.

The vulnerability of the TrueTypeScaler component in Mac OS X and iOS operating systems arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely or cause a service failure memory corruption by using a specially crafted font file...

The vulnerabilities in iOS and Mac OS X operating systems allow attackers to trigger service failures or execute arbitrary code in privileged contexts.

The vulnerability of the kernel in iOS and Mac OS X operating systems is related to pointer dereferencing errors. Exploiting this vulnerability allows a malicious actor to execute arbitrary code in privileged context or trigger a service denial zero pointer dereferencing through a specially creat...

Vulnerabilities of iOS and Mac OS X operating systems, allowing attackers to trigger service interruptions

The vulnerability of the kernels in iOS and Mac OS X operating systems exists due to insufficient checking of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures through a specially created application...