Tag Apple

Zero-Day Vulnerabilities Discovered in iPhone X, Samsung Galaxy S9, and Xiaomi Mi6 Smartphones

Pwn2Own 2018: A Showcase of Mobile Vulnerabilities The Pwn2Own 2018 mobile hacking competition, held in Tokyo on November 13-14, demonstrated the ongoing vulnerability of even well-secured smartphones. White hat hackers successfully exploited fully patched devices, including flagship models from renowned manufacturers, revealing concerning security gaps. Key targets included the iPhone…

Read MoreZero-Day Vulnerabilities Discovered in iPhone X, Samsung Galaxy S9, and Xiaomi Mi6 Smartphones

Chinese Hacker Releases Proof of Concept for Remote iOS 12 Jailbreak on iPhone X

New iOS Vulnerability Exposes iPhone Users to Remote Jailbreak Threats In a significant security development, a Chinese cybersecurity researcher has disclosed critical vulnerabilities in Apple’s Safari web browser and iOS, potentially allowing remote attackers to jailbreak iPhone X devices operating on iOS 12.1.2 and earlier versions. This revelation raises concerns…

Read MoreChinese Hacker Releases Proof of Concept for Remote iOS 12 Jailbreak on iPhone X

iCloud May Have Experienced a Privacy Breach Last Year That Apple Did Not Disclose

Apple iCloud Privacy Breach: Potential Exposure of User Data Late last year, reports emerged regarding a potential privacy breach impacting Apple’s iCloud service. A security flaw allowed unauthorized access to partial data from multiple iCloud accounts, raising alarms about user privacy and data security. The incident appears to have occurred…

Read MoreiCloud May Have Experienced a Privacy Breach Last Year That Apple Did Not Disclose

iOS 12.1.4 Update Fixes Two Zero-Day Vulnerabilities and FaceTime Issues

In a crucial move for cybersecurity, Apple has unveiled the iOS 12.1.4 software update, addressing a significant vulnerability in its Group FaceTime feature. This flaw could have permitted unauthorized access to users, allowing an individual to hear or see them without consent during video calls. The issue, registered as CVE-2019-6223,…

Read MoreiOS 12.1.4 Update Fixes Two Zero-Day Vulnerabilities and FaceTime Issues

New Vulnerabilities Reactivate DMA Attacks on a Variety of Modern Computers

New Vulnerabilities Expose All Major Operating Systems to DMA Attacks Recent research has unveiled a significant security concern that affects widely-used operating systems, including Microsoft Windows, Apple macOS, Linux, and FreeBSD. These vulnerabilities allow attackers to potentially bypass existing security measures against Direct Memory Access (DMA) attacks by exploiting newly…

Read MoreNew Vulnerabilities Reactivate DMA Attacks on a Variety of Modern Computers

New Class of CPU Vulnerabilities Impacts Nearly All Intel Processors Since 2011

Recent research has unveiled an alarming class of speculative execution vulnerabilities that affect Intel processors, impacting all modern devices, including those produced by Apple. These vulnerabilities build upon the widely publicized Spectre and Meltdown flaws, which were discovered last year and led to widespread concern regarding the security risks faced…

Read MoreNew Class of CPU Vulnerabilities Impacts Nearly All Intel Processors Since 2011

Critical RCE Vulnerability Discovered in Zoom Video Conferencing for macOS

Recent revelations regarding privacy vulnerabilities in the widely-used Zoom video conferencing software have raised significant alarm across both personal and corporate sectors. The disclosed vulnerabilities have not only highlighted potential risks to user privacy but have also indicated serious threats to device security, especially for Mac users. The core issue…

Read MoreCritical RCE Vulnerability Discovered in Zoom Video Conferencing for macOS

iOS URL Scheme Vulnerability: Potential for App-in-the-Middle Attacks to Compromise Your Accounts

Security Researchers Uncover App-in-the-Middle Attack Vulnerability on iOS Recent findings from security researchers have revealed a serious vulnerability within Apple’s iOS that allows malicious applications to exploit the Custom URL Scheme feature, potentially compromising sensitive user information. This new app-in-the-middle attack enables hostile software on a user’s device to intercept…

Read MoreiOS URL Scheme Vulnerability: Potential for App-in-the-Middle Attacks to Compromise Your Accounts

April Patch Tuesday Addresses Critical Vulnerabilities in SAP, Adobe, Microsoft, Fortinet, and Others

In the realm of cybersecurity, recent developments from April’s Patch Tuesday have highlighted numerous critical vulnerabilities affecting significant software vendors including Adobe, Fortinet, Microsoft, and SAP. Topping the list is an SQL injection vulnerability affecting SAP’s Business Planning and Consolidation and Business Warehouse systems (CVE-2026-27681), which carries a CVSS score…

Read MoreApril Patch Tuesday Addresses Critical Vulnerabilities in SAP, Adobe, Microsoft, Fortinet, and Others