Tag: apple

Apple Fixes WebKit Vulnerability Enabling Same-Origin Policy Bypass on iOS and macOS

Mar 18, 2026 9:10 AM

Tags: api, apple, cve, exploit, flaw, macOS, vulnerability

Apple on Tuesday released its first round of Background Security Improvements to address a security flaw in WebKit that affects iOS, iPadOS, and macOS.The vulnerability, tracked as CVE-2026-20643 (CVSS score: N/A), has been described as a cross-origin issue in WebKit’s Navigation API that could be exploited to bypass the same-origin policy when processing maliciously crafted…
In macOS, iOS & iPadOS – 7 Zero Days bei Apple, 3 davon aktiv ausgenutzt

Mar 18, 2026 8:09 AM

Tags: apple, macOS, zero-day

First seen on security-insider.de Jump to article: www.security-insider.de/apple-zero-day-luecken-macos-ios-ipados-safari-a-9d9af57062fda0e539e17406e879db48/
Apple pushes first Background Security Improvements update to fix WebKit flaw

Mar 18, 2026 5:10 AM

Tags: apple, cve, flaw, iphone, update

Apple has released its first Background Security Improvements update to fix a WebKit flaw tracked as CVE-2026-20643 on iPhones, iPads, and Macs without requiring a full operating system upgrade. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/apple-pushes-first-background-security-improvements-update-to-fix-webkit-flaw/
Apple rolls out first ‘background security’ update for iPhones, iPads, and Macs to fix Safari bug

Mar 17, 2026 10:10 PM

Tags: apple, iphone, update, vulnerability

Apple’s first-ever “background security improvement” fixes a vulnerability in its Safari browser running its latest software. First seen on techcrunch.com Jump to article: techcrunch.com/2026/03/17/apple-rolls-out-first-background-security-update-for-iphones-ipads-and-macs-to-fix-safari-bug/
Georgia man charged for robbing NBA, NFL players through stolen Apple account details

Mar 17, 2026 7:10 PM

Tags: apple, breach

A Georgia man who had already served time for conning professional athletes is accused of impersonating a prominent adult film actress in order to break into the Apple accounts of NBA and NFL players. First seen on therecord.media Jump to article: therecord.media/phishing-nba-nfl-scammer-arrested
Apple Releases Emergency iOS 15.8.7 Update to Block ‘Coruna’ Exploit Kit

Mar 13, 2026 11:10 AM

Tags: apple, cyber, exploit, iphone, threat, update

Apple has rolled out an emergency security update, iOS 15.8.7 and iPadOS 15.8.7, to protect users of older iPhones and iPads from a sophisticated threat known as the Coruna exploit kit. Released on March 11, 2026, this critical patch backports several major security fixes that were previously issued for newer devices running iOS 16 and…
Apple patches Coruna exploit kit flaws for older iOS versions

Mar 13, 2026 12:10 AM

Tags: apple, exploit, flaw, update, vulnerability

Apple issued security updates for older iOS and iPadOS versions to close vulnerabilities exploited by the Coruna exploit kit. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/apple-patches-coruna-exploit-kit-flaws-for-older-ios-versions/
Apple issues emergency fixes for Coruna flaws in older iOS versions

Mar 12, 2026 5:10 PM

Tags: apple, flaw, iphone, update, vulnerability

Apple released iOS 16.7.15 and 15.8.7 updates for older iPhones and iPads to patch vulnerabilities linked to the Coruna exploits. Apple has released security updates for legacy devices, rolling out iOS and iPadOS 16.7.15 and 15.8.7 to address vulnerabilities tied to the recently disclosed Coruna exploits. The patches aim to protect older iPhone and iPad…
Apple patches older iPhones and iPads against Coruna exploits

Mar 12, 2026 3:10 PM

Tags: apple, attack, crypto, cyberespionage, exploit, iphone, theft, update, vulnerability

Apple has released security updates to patch older iPhones and iPads against a set of vulnerabilities targeted in cyberespionage and crypto-theft attacks using the Coruna exploit kit. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/apple/apple-patches-older-iphones-and-ipads-against-coruna-exploits/
New ClickFix Attacks Target macOS Users with MacSync Infostealer

Mar 12, 2026 1:09 PM

Tags: apple, attack, cyber, exploit, macOS, malicious, social-engineering, software, tactics, threat

A new wave of ClickFix campaigns targeting macOS users and delivering the MacSync infostealer, signaling a growing shift in threat actor tactics against Apple devices. The attacks rely heavily on social engineering rather than software exploits, tricking users into manually executing malicious commands in macOS Terminal. ClickFix is a deceptive technique where attackers present step”‘by”‘step…
New ClickFix Attacks Target macOS Users with MacSync Infostealer

Mar 12, 2026 1:09 PM

Tags: apple, attack, cyber, exploit, macOS, malicious, social-engineering, software, tactics, threat

A new wave of ClickFix campaigns targeting macOS users and delivering the MacSync infostealer, signaling a growing shift in threat actor tactics against Apple devices. The attacks rely heavily on social engineering rather than software exploits, tricking users into manually executing malicious commands in macOS Terminal. ClickFix is a deceptive technique where attackers present step”‘by”‘step…
Apple Issues Security Updates for Older iOS Devices Targeted by Coruna WebKit Exploit

Mar 12, 2026 12:10 PM

Tags: apple, cve, exploit, flaw, iphone, macOS, update, vulnerability

Apple on Wednesday backported fixes for a security flaw in iOS, iPadOS, and macOS Sonoma to older versions after it was found to be used as part of the Coruna exploit kit.The vulnerability, tracked as CVE-2023-43010, relates to an unspecified vulnerability in WebKit that could result in memory corruption when processing maliciously crafted web content.…
iPhone und iPad: Apple veröffentlicht Coruna-Fix

Mar 12, 2026 12:10 PM

Tags: apple, exploit, iphone

Das Exploit-Kit Coruna betrifft Nutzer älterer iPhones und iPads. Apple hat nun Sicherheitsupdates für alte iOS-Versionen veröffentlicht. First seen on golem.de Jump to article: www.golem.de/news/iphone-und-ipad-apple-veroeffentlicht-coruna-fix-2603-206406.html
Devs looking for OpenClaw get served a GhostClaw RAT

Mar 10, 2026 1:47 PM

Tags: access, apple, credentials, crypto, data, detection, email, malware, password, rat, service, theft, tool

From password theft to persistence: The second stage malware, internally referred to as “GhostLoader,” is a large JavaScript bundle implementing both an infostealer and a remote access framework. Once launched, GhostLoader installs itself into a hidden directory disguised as an npm telemetry service and sets up persistence mechanisms which include shell configuration hooks that automatically…
U.S. CISA adds Ivanti EPM, SolarWinds, and Omnissa Workspace One flaws to its Known Exploited Vulnerabilities catalog

Mar 10, 2026 12:47 PM

Tags: apple, cisa, cybersecurity, exploit, flaw, infrastructure, ivanti, kev, vulnerability

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds EPM, SolarWinds, and Omnissa Workspace One flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Apple, Rockwell, and Hikvision flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the catalog: The first vulnerability added to the catalog is…
Microsoft Azure CTO set Claude on his 1986 Apple II code, says it found vulns

Mar 9, 2026 1:47 PM

Tags: apple, microsoft, risk

This isn’t just a nostalgia trip billions of legacy microcontrollers may be at risk First seen on theregister.com Jump to article: www.theregister.com/2026/03/09/claude_legacy_code_vulns/
Microsoft Azure CTO set Claude on his 1986 Apple II code, says it found vulns

Mar 9, 2026 1:47 PM

Tags: apple, microsoft, risk

This isn’t just a nostalgia trip billions of legacy microcontrollers may be at risk First seen on theregister.com Jump to article: www.theregister.com/2026/03/09/claude_legacy_code_vulns/
Microsoft Azure CTO set Claude on his 1986 Apple II code, says it found vulns

Mar 9, 2026 1:47 PM

Tags: apple, microsoft, risk

This isn’t just a nostalgia trip billions of legacy microcontrollers may be at risk First seen on theregister.com Jump to article: www.theregister.com/2026/03/09/claude_legacy_code_vulns/
CISA Alerts Users to Actively Exploited Vulnerabilities Impacting macOS and iOS

Mar 9, 2026 6:48 AM

Tags: apple, cisa, cyber, cybersecurity, exploit, flaw, infrastructure, kev, macOS, network, vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding three actively exploited vulnerabilities affecting multiple Apple platforms. On March 5, 2026, CISA added these security flaws to its Known Exploited Vulnerabilities (KEV) catalog, requiring immediate attention from network defenders and system administrators. These vulnerabilities impact a wide range of Apple devices…
TDL – Defense Before Offense: Leadership, Risk, and the Cost of Bad Decisions – Steven Elliott

Mar 7, 2026 12:48 AM

Tags: ai, apple, business, cctv, ceo, ciso, country, cyber, cybersecurity, data, defense, finance, guide, insurance, international, Internet, jobs, marketplace, metric, military, network, offense, organized, resilience, risk, service, software, strategy, switch, technology, threat, usa

From the Battlefield to the Boardroom: Lessons in Defense In the latest episode of The Defender’s Log, host David Redekop sits down with Steven Elliott, CFO of Adam Networks, to explore the surprising parallels between military operations, financial management, and cybersecurity. A Journey of Unpredictable Paths Elliott’s background is anything but linear. From a small…
CISA warns of Apple flaws exploited in spyware, crypto-theft attacks

Mar 6, 2026 5:46 PM

Tags: apple, attack, cisa, crypto, cyberespionage, exploit, flaw, spyware, theft, update

CISA ordered U.S. federal agencies to patch three iOS security flaws targeted in cyberespionage and crypto-theft attacks using the Coruna exploit kit. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/cisa-warns-of-apple-flaws-exploited-in-spyware-crypto-theft-attacks/
U.S. CISA adds Apple, Rockwell, and Hikvision flaws to its Known Exploited Vulnerabilities catalog

Mar 6, 2026 11:47 AM

Tags: apple, cisa, cve, cybersecurity, exploit, flaw, infrastructure, kev, vulnerability

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds Apple, Rockwell, and Hikvision flaws to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added Apple, Rockwell, and Hikvision flaws to its Known Exploited Vulnerabilities (KEV) catalog. Below are the flaws added to the catalog: CVE-2023-43000 is a use-after-free issue in the WebKit component. Apple…
Zero-day exploits hit enterprises faster and harder

Mar 6, 2026 9:48 AM

Tags: access, apple, attack, backdoor, business, china, cisco, cve, data, detection, endpoint, espionage, exploit, firewall, flaw, fortinet, google, group, hacker, infrastructure, ivanti, least-privilege, mobile, network, oracle, radius, ransomware, risk, router, russia, service, software, technology, threat, update, vpn, vulnerability, zero-day

Enterprise environments under siege: Chinese threat actors continued to display a preference for targets that are difficult to monitor and allow persistent access to strategic networks. Notable examples include the groups that GTIG tracks as UNC5221, which exploited a flaw in Ivanti Connect Secure (CVE-2025-0282) and UNC3886, which exploited a vulnerability in Juniper routers (CVE-2025-21590).Another…
Google uncovers Coruna iOS Exploit Kit targeting iOS 1317.2.1

Mar 5, 2026 8:46 AM

Tags: apple, exploit, google, group, intelligence, iphone, threat

Google warns of the Coruna iOS exploit kit, using 23 exploits across five chains to target iPhones running iOS 1317.2.1, but not the latest iOS. Google’s Threat Intelligence Group has identified a powerful new iOS exploit kit called Coruna (also known as CryptoWaters) that targets Apple iPhones running iOS versions 13.0 through 17.2.1. The kit…
Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 1317.2.1

Mar 4, 2026 3:48 PM

Tags: apple, exploit, google, group, intelligence, iphone, threat

Google said it identified a “new and powerful” exploit kit dubbed Coruna (aka CryptoWaters) targeting Apple iPhone models running iOS versions between 13.0 and 17.2.1.The exploit kit featured five full iOS exploit chains and a total of 23 exploits, Google Threat Intelligence Group (GTIG) said. It’s not effective against the latest version of iOS. The…
A suite of government hacking tools targeting iPhones is now being used by cybercriminals

Mar 4, 2026 12:47 AM

Tags: apple, cybercrime, exploit, government, hacking, iphone, tool

Security researchers say exploits used by governments to hack into Apple iPhones have been found used by cybercriminals. They warned of an emerging market for “second hand” exploits. First seen on techcrunch.com Jump to article: techcrunch.com/2026/03/03/a-suite-of-government-hacking-tools-targeting-iphones-is-now-being-used-by-cybercriminals/
Plant Apple ein Budget-Macbook für 700 Dollar? Für wen sich das preiswerte Notebook lohnen könnte

Feb 27, 2026 4:37 PM

Tags: apple

First seen on t3n.de Jump to article: t3n.de/news/apple-budget-macbook-unter-700-dollar-1731371/
iPhone and iPad are the first consumer devices cleared for NATO ‘RESTRICTED’ classification

Feb 27, 2026 3:37 PM

Tags: apple, iphone, military

Apple’s iPhone and iPad are now NATO-approved for classified use, listed in the alliance’s Information Assurance Product Catalogue. Apple announced that its iPhone and iPad have received NATO approval to handle classified information. The devices are now officially listed in the NATO Information Assurance Product Catalogue (NIAPC), allowing military personnel to use them securely for…
iPhone und iPad bekommen Nato-Sicherheitszertifizierung

Feb 27, 2026 11:37 AM

Tags: apple, iphone, software

iPhones und iPads mit den aktuellen Betriebssystemversionen können ohne zusätzliche Software für Nato-Verschlusssachen verwendet werden. First seen on golem.de Jump to article: www.golem.de/news/apple-iphone-und-ipad-bekommen-nato-sicherheitszertifizierung-2602-205911.html
NATO greenlights iPhone and iPad for classified information handling

Feb 27, 2026 10:36 AM

Tags: apple, iphone

Apple confirmed that the iPhone and iPad have been approved for use with classified information in NATO restricted environments. The devices will no longer require special … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2026/02/27/apple-iphone-ipad-nato-classified-information/