Hackers behind iPhone Ransom Attacks Arrested in Russia

A cyber campaign that was targeting iPhone and iPad owners with a sophisticated Ransomware in Australia and New Zealand last month, drawn special attention of online media and security analysts. Russian Authorities have arrested two young hackers from Moscow for their alleged involvement in...

Dennis Fisher and Mike Mimoso Discuss Edward Snowden, NSA and the new OpenSSL Vuln

Dennis Fisher and Mike Mimoso discuss the changes in the year since the first stories broke regarding Edward Snowden and the NSA and the new OpenSSL vulnerability.​ Download: digitalunderground155.mp3 Music by Chris Gonsalves...

APPLE-SA-2014-05-15-2 iTunes 11.2

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-05-15-2 iTunes 11.2 iTunes 11.2 is now available and addresses the following: iTunes Available for: Windows 8, Windows 7, Vista, XP SP3 or later Impact: An attacker in a privileged network position can obtain iTunes credentials...

APPLE-SA-2014-05-16-1 iTunes 11.2.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-05-16-1 iTunes 11.2.1 iTunes 11.2.1 is now available and addresses the following: iTunes Available for: Mac OS X v10.6.8 or later Impact: A local user can compromise other local user accounts Description: Upon each reboot, the permission...

iTunes security vulnerabilities

Invalid HTTP headers processing, weak permissions...

Apple iTunes < 11.2.1 User Directory Insecure Permissions Vulnerability (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 11.2.1. It is, therefore, affected by an insecure permissions vulnerability. An insecure permissions vulnerability exists when the '/Users' and '/Users/Shared' directories have world-writable permissions. This can allow a local...

iTunes < 11.2.1 User Directory Insecure Permissions Vulnerability (Mac OS X)

The version of iTunes installed on the remote Mac OS X host is older than 11.2.1. It is, therefore, affected by an insecure permissions vulnerability. An insecure permissions vulnerability exists where the '/Users' and '/Users/Shared' directories have world-writable permissions. This could allow ...

iTunes < 11.2.1 Insecure Permissions Local Privilege Escalation

Binary data 8259.prm...

CVE-2014-1347

Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary user accounts, via standard filesystem operations...

Code injection

Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary user accounts, via standard filesystem operations...

CVE-2014-1347

CVE-2014-1347 refers to an issue in Apple iTunes before 11.2.1 on macOS where, during reboot, the permissions of /Users and /Users/Shared are set to world-writable. This allows a local attacker to modify files and potentially access arbitrary user accounts via standard filesystem operations, cons...

CVE-2014-1347

Apple iTunes before 11.2.1 on OS X sets world-writable permissions for /Users and /Users/Shared during reboots, which allows local users to modify files, and consequently obtain access to arbitrary user accounts, via standard filesystem operations...

KLA10077 WLF vulnerability in Apple iTunes

A permissions vulnerability was found in Apple iTunes. By exploiting this vulnerability malicious users can modify local files. This vulnerability can be exploited locally via standard file system operations. Original advisories Apple bulletin Related products Apple-iTunes CVE list CVE-2014-1347...

Apple Releases OS X 10.9.3, Fixes Serious Flaw in iTunes

Apple has released a new version of OS X Mavericks, which includes all of the security fixes it pushed out last month. OS X 10.9.3 includes the patches for the so-called triple handshake SSL vulnerability, as well as fixes for several remote code-execution vulnerabilities. The company also releas...

Apple iTunes < 11.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote host is prior to version 11.2. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the CFNetwork HTTPProtocol due to a failure to properly ensure that a Set-Cookie HTTP header is complete before interpreting the header's...

Apple iTunes < 11.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes running on the remote host is prior to version 11.2. It is, therefore, affected by multiple vulnerabilities : - A flaw exists in the CFNetwork HTTPProtocol due to a failure to properly ensure that a Set-Cookie HTTP header is complete before interpreting the header's...

Apple Releases Security Updates for OS X and iTunes

Apple has released updates to OS X and iTunes to address multiple vulnerabilities, some of which could allow an attacker to execute arbitrary code, obtain website credentials, or take control of the affected system. Updates are available: OS X Mavericks 10.9.3 for OS X Mavericks 10.9 to 10.9.2...

APPLE-SA-2014-04-22-2 iOS 7.1.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2014-04-22-2 iOS 7.1.1 iOS 7.1.1 is now available and addresses the following: CFNetwork HTTPProtocol Available for: iPhone 4 and later, iPod touch 5th generation and later, iPad 2 and later Impact: An attacker in a privileged network positio...

Disabling 'Find My iPhone' on iOS 7 without any Password

iOS devices have a feature called 'Find My iPhone', allows device owner to locate their stolen devices using linked Apple ID with iCloud Account. Unfortunately, a security flaw in iOS make it possible to turn off Find My iPhone without a password and enabled thieves to bypass the protection which...

Apple iOS 7.1 Fixes More Than 20 Code-Execution Flaws

Apple has fixed a slew of vulnerabilities that could lead to code execution on the iPhone, along with a number of other security vulnerabilities in the latest version of its mobile operating system, iOS 7.1. The new release comes just a little more than two weeks after Apple released iOS 7.06 to...