ios

Apple patches new zero-day actively exploited in the wild

2 min read

Apple patches new zero-day actively exploited in the wild

RiSec 26 January 2022

Apple has released security updates to patch two zero-day vulnerabilities, with one publicly disclosed and the other exploited in the wild by attackers to hack into iPhones and Macs. The first zero-day patched today (tracked as CVE-2022-22587) [1, 2] is a memory corruption bug in the IOMobileFrameBuffer that affects iOS, iPadOS, and macOS Monterey. Successful exploitation of this bug leads to arbitrary code execution with kernel privileges on compromised devices. “Apple is aware of a report that this issue may have been actively exploited,” Apple said when describing the zero-day...

Safari and iOS users: Your browsing activity is being leaked in real-time

4 min read

Safari and iOS users: Your browsing activity is being leaked in real-time

RiSec 23 January 2022

Unfixed bug violating the Internet’s most foundational rules is easy to exploit. For the past four months, Apple’s iOS and iPadOS devices and Safari browsers have violated one of the Internet’s most sacrosanct security policies. The violation results from a bug that leaks user identities and browsing activity in real-time. Safari and iOS Data Leaked The same-origin policy is a foundational security mechanism that forbids documents, scripts, or other content loaded from one origin—meaning the protocol, domain name, and port of a given webpage or app—from interacting with resources from other...

Apple patches three actively exploited zero‑day flaws in iOS

2 min read

Cybersecurity News

Apple patches three actively exploited zero‑day flaws in iOS

RiSecPy 12 November 2020

Long list of vulnerable actively exploited devices Apple has released patches of its own to fix three zero-day vulnerabilities under active attacks. The trio of flaws, affecting a broad range of Apple’s products, also happened to be unearthed by the bug-hunting crew. “Apple is aware of reports that an exploit for this issue exists in the wild,” reads the company’s security bulletin describing each of the three flaws. Impacted Devices iPhone 6s and later iPod touch 7th generation iPad Air 2 and later, iPad mini 4 and later. The Cupertino tech...