Categories: News Tags: Apple Tags: iOS 12.5.6 Tags: webkit Tags: CVE-2022-32893 Apple has released a security update for iOS 12.5.6 to patch a remotely exploitable WebKit vulnerability that allows attackers to execute arbitrary code on unpatched devices. |
The post Apple releases security update for iPhones and iPads to address vulnerability appeared first on Malwarebytes Labs.
Read more
Credit to Author: Lucas Mearian| Date: Thu, 01 Sep 2022 16:46:00 -0700
Apple this week released urgent security updates to address zero-day vulnerabilities on older model iPhones, iPads, and iPods.
The patches, pushed out on Wednesday, address an out-of-bounds write issue that could be exploited by an attacker enabling them to take control of the affected device. The US Cybersecurity and Infrastructure Agency (CISA) today encouraged users and IT admins to review Apple’s advisory HT213428 and apply the necessary updates.
Credit to Author: Paul Ducklin| Date: Wed, 31 Aug 2022 18:42:42 +0000
Patch as soon as you can – that recent WebKit zero-day affecting new iPhones and iPads is apparently being used against older models, too.
Read more
Credit to Author: Paul Ducklin| Date: Wed, 31 Aug 2022 18:42:42 +0000
Patch as soon as you can – that recent WebKit zero-day affecting new iPhones is apparently being used against older models, too.
Read more
Credit to Author: Jonny Evans| Date: Fri, 26 Aug 2022 09:43:00 -0700
Announced at WWDC 2022, Managed Device Attestation protection shows that Apple is adjusting device security protections to adapt to an increasingly distributed age.
This adjustment reflects a reality shift. Work doesn’t happen on specific servers or behind defined firewalls today. VPN access can differ across teams. And yet, in a workplace defined by multiple remote devices (endpoints), the security threat is greater than ever.
Managed Device Attestation works to create a second boundary of trust around which device management solutions can work to protect against attack.
Credit to Author: Paul Ducklin| Date: Thu, 25 Aug 2022 15:37:51 +0000
Latest episode – listen now! (Or read the transcript if you prefer the text version.)
Read more
Credit to Author: Paul Ducklin| Date: Wed, 17 Aug 2022 23:33:21 +0000
Double 0-day exploits – one in WebKit (to break in) and the other in the kernel (to take over). Patch now!
Read more
Credit to Author: Jonny Evans| Date: Mon, 01 Aug 2022 09:03:00 -0700
Depending on how you look at it, Apple may be ramping up ways developers can reach out durectly to customers via its App Store – or building its own business at others’ expense.
Apple has had an advertising business of its own ever since Apple’s then CEO, Steve Jobs, introduced us to iAds in 2010. The scale of that offer was always limited to Apple’s platform, but the service arguably failed, with its technology living on in the form of ad slots in Apple News and the App Store.
Apple’s App Store currently hosts just two ad slots, one in the search tab and the other in Search results. You can tell when you are looking at an ad from the blue shade behind the graphic and a small blue badge that says “ad” – these ads are hard to mistake for content.
Credit to Author: Paul Ducklin| Date: Thu, 28 Jul 2022 15:47:16 +0000
Latest episode – listen now!
Read more
Credit to Author: Paul Ducklin| Date: Thu, 21 Jul 2022 20:38:22 +0000
One vendor’s zero-day is another vendor’s routine patch…
Read more