Apple iOS 14 Thwarts iMessage Attacks With BlastDoor System

In an effort to prevent attacks from being launched via its iMessage feature, Apple has debuted a security service called BlastDoor in iOS 14, its current mobile operating system version. First detailed in an analysis this week by Google Project Zero’s Samuel Groß, BlastDoor acts as a “tightly...

[SECURITY] Fedora 32 Update: firejail-0.9.62.4-1.fc32

Firejail is a SUID sandbox program that reduces the risk of security breaches by restricting the running environment of untrusted applications using Linux namespaces. It includes a sandbox profile for Mozilla Firefox...

Apple macOS 10.12.1 / iOS < 10.2 - syslogd Arbitrary Port Replacement

/ Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=977 syslogd running as root hosts the com.apple.system.logger mach service. It's part of the system.sb sandbox profile and so reachable from a lot of sandboxed contexts. Here's a snippet from its mach message handling loop...

CVE-2014-8828: Undefined Security Weakness

Sandbox in Apple OS X before 10.10 allows attackers to write to the sandbox-profile cache via a sandboxed app that includes a com.apple.sandbox segment in a path...

PT-2015-4094

Name of the Vulnerable Software and Affected Versions Apple OS X versions prior to 10.10 Description The issue allows attackers to write to the sandbox-profile cache by utilizing a sandboxed app that includes a com.apple.sandbox segment in a path. Recommendations For Apple OS X versions prior to...

Apple iOS 8.1.1 Fixes Several Code-Execution Flaws

Apple has patched 10 vulnerabilities in iOS, including a pair of bugs that allowed arbitrary code execution and one that enables an attacker to run random binaries on a target device. The patches come in iOS 8.1.1, a small update to the company’s mobile operating system. There are several serious...

PT-2011-3183

Name of the Vulnerable Software and Affected Versions Mac OS X versions 10.5.x through 10.7.x Description The issue concerns the kSBXProfileNoNetwork and kSBXProfileNoInternet sandbox profiles, which fail to propagate restrictions to all created processes. This allows remote attackers to access...