News in the Apple category

Safari bug leaks your Google account info, browsing history

There's a problem with the implementation of the IndexedDB API in Safari's WebKit engine, which could result in leaking browsing histories and even user identities to anyone exploiting the flaw.
- Bill Toulas
- January 17, 2022
- 08:47 AM
- 0
Microsoft: powerdir bug gives access to protected macOS user data

Microsoft says threat actors could use a macOS vulnerability to bypass Transparency, Consent, and Control (TCC) technology to access users' protected data.
- Sergiu Gatlan
- January 10, 2022
- 12:39 PM
- 0
iOS malware can fake iPhone shut downs to snoop on camera, microphone

Researchers have developed a new technique that fakes a shutdown or reboot of iPhones, preventing malware from being removed and allowing hackers to secretly snoop on microphones and receive sensitive data via a live network connection.
- Bill Toulas
- January 05, 2022
- 09:54 AM
- 6
Apple iOS vulnerable to HomeKit 'doorLock' denial of service bug

A novel persistent denial of service vulnerability named 'doorLock' was discovered in Apple HomeKit, affecting iOS 14.7 through 15.2.
- Bill Toulas
- January 03, 2022
- 10:39 AM
- 0
Apple fixes macOS security flaw behind Gatekeeper bypass

Apple has addressed a macOS vulnerability that unsigned and unnotarized script-based apps could exploit to bypass all macOS security protection mechanisms even on fully patched systems.
- Sergiu Gatlan
- December 23, 2021
- 05:09 PM
- 0
Google, Apple fined by Italian authority for aggressive data collection

Italy's competition authority (Autorita Garante della Concorrenza e del Mercato) has announced a fine of 10 million Euros ($11.3 million) against Google and Apple.
- Bill Toulas
- November 26, 2021
- 01:42 PM
- 1
Ukraine arrests ‘Phoenix’ hackers behind Apple phishing attacks

The Security Service of Ukraine (SSU) has arrested five members of the international 'Phoenix' hacking group who specialize in the remote hacking of mobile devices.
- Bill Toulas
- November 24, 2021
- 09:57 AM
- 0
Apple sues spyware-maker NSO Group, notifies iOS exploit targets

Apple has filed a lawsuit against Pegasus spyware-maker NSO Group and its parent company for the targeting and spying of Apple users with surveillance tech.
- Sergiu Gatlan
- November 23, 2021
- 01:31 PM
- 1
Microsoft patches Excel zero-day used in attacks, asks Mac users to wait

During this month's Patch Tuesday, Microsoft has patched an Excel zero-day vulnerability exploited in the wild by threat actors.
- Sergiu Gatlan
- November 10, 2021
- 10:36 AM
- 0
macOS Monterey update causes some Macs to become unbootable

A growing number of Mac and Macbook owners report that their devices become unbootable after attempting to update to the latest version of macOS, codenamed 'Monterey.'
- Bill Toulas
- November 02, 2021
- 10:50 AM
- 4
Microsoft: Shrootless bug lets hackers install macOS rootkits

Attackers could use a new macOS vulnerability discovered by Microsoft to bypass System Integrity Protection (SIP) and perform arbitrary operations, elevate privileges to root, and install rootkits on vulnerable devices.
- Sergiu Gatlan
- October 28, 2021
- 12:44 PM
- 0
Microsoft Defender ATP adds live response for Linux and macOS

Microsoft has announced the addition of new live macOS and Linux response capabilities to Defender for Endpoint, , the enterprise version of Redmond's Windows 10 Defender antivirus.
- Sergiu Gatlan
- October 25, 2021
- 11:50 AM
- 0
Microsoft: WizardUpdate Mac malware adds new evasion tactics

Microsoft says it found new variants of macOS malware known as WizardUpdate (also tracked as UpdateAgent or Vigram), updated to use new evasion and persistence tactics.
- Sergiu Gatlan
- October 22, 2021
- 11:14 AM
- 0
Apple silently fixes iOS zero-day, asks bug reporter to keep quiet

Apple has silently fixed a gamed zero-day vulnerability with the release of iOS 15.0.2, on Monday, a security flaw that could let attackers gain access to sensitive user information.
- Sergiu Gatlan
- October 13, 2021
- 11:25 AM
- 2
Emergency Apple iOS 15.0.2 update fixes zero-day used in attacks

Apple has released iOS 15.0.2 and iPadOS 15.0.2 to fix a zero-day vulnerability that is actively exploited in the wild in attacks targeting Phones and iPads.
- Lawrence Abrams
- October 11, 2021
- 02:48 PM
- 1
Netherlands orders Apple to offer more App Store payment methods

The Authority for Consumers and Markets (ACM) in the Netherlands is pressing Apple to lift App Store payment restrictions in the country.
- Bill Toulas
- October 07, 2021
- 09:16 AM
- 2
Researcher drops three iOS zero-days that Apple refused to fix

Proof-of-concept exploit code for three iOS zero-day vulnerabilities (and a fourth one patched in July) was published on GitHub after Apple delayed patching and failed to credit the researcher.
- Sergiu Gatlan
- September 24, 2021
- 07:13 AM
- 3
Apple patches new zero-day bug used to hack iPhones and Macs

Apple has released security updates to fix a zero-day vulnerability exploited in the wild by attackers to hack into iPhones and Macs running older iOS and macOS versions.
- Sergiu Gatlan
- September 23, 2021
- 02:23 PM
- 0
Apple will disable insecure TLS in future iOS, macOS releases

Apple has deprecated the insecure Transport Layer Security (TLS) 1.0 and 1.1 protocols in recently launched iOS and macOS versions and plans to remove support in future releases altogether.
- Sergiu Gatlan
- September 22, 2021
- 12:59 PM
- 0
New macOS zero-day bug lets attackers run commands remotely

Security researchers disclosed today a new vulnerability in Apple's macOS Finder, which makes it possible for attackers to run commands on Macs running any macOS version up to the latest release, Big Sur.
- Sergiu Gatlan
- September 21, 2021
- 04:01 PM
- 0