Tag: apple
-
Hackers Abuse PyInstaller to Deploy Stealthy macOS Infostealer
Jamf Threat Labs has identified a novel macOS infostealer that exploits PyInstaller, a legitimate open-source tool used to bundle Python scripts into standalone Mach-O executables. This marks the first documented instance of PyInstaller being weaponized to deploy infostealers on macOS, highlighting a sophisticated evolution in the tactics of cybercriminals targeting Apple’s ecosystem. Discovered in April…
-
Contempt order worsens Apple’s antitrust woes
A federal judge found Apple to be in contempt of an injunction ordering the company to make access to alternative payment options in the company’s App Store easier. First seen on techtarget.com Jump to article: www.techtarget.com/searchcio/news/366623650/Contempt-order-worsens-Apples-antitrust-woes
-
Google Researchers Use Mach IPC to Uncover Sandbox Escape Vulnerabilities
Google Project Zero researchers have uncovered new sandbox escape vulnerabilities in macOS using an innovative approach that leverages Mach Interprocess Communication (IPC) mechanisms-core components of Apple’s operating system. Their public research details how low-level message passing between privileged and sandboxed processes can be a dangerous attack vector, and offers open-source tools and code for the…
-
Malicious npm Packages Infect 3,200+ Cursor Users With Backdoor, Steal Credentials
Tags: ai, api, apple, backdoor, credentials, cybersecurity, infrastructure, intelligence, macOS, malicious, threat, toolCybersecurity researchers have flagged three malicious npm packages that are designed to target the Apple macOS version of Cursor, a popular artificial intelligence (AI)-powered source code editor.”Disguised as developer tools offering ‘the cheapest Cursor API,’ these packages steal user credentials, fetch an encrypted payload from threat actor-controlled infrastructure, overwrite Cursor’s First seen on thehackernews.com Jump…
-
Researchers Uncover Remote Code Execution Flaw in macOS CVE-2024-44236
Security researchers Nikolai Skliarenko and Yazhi Wang of Trend Micro’s Research Team have disclosed critical details about CVE-2024-44236, a memory corruption vulnerability in Apple’s macOS Scriptable Image Processing System (sips). Discovered by Hossein Lotfi through Trend Micro’s Zero Day Initiative, this flaw allows arbitrary code execution via maliciously crafted ICC profile files. Patched in October…
-
New Attack Exploits X/Twitter Ad URL Feature to Deceive Users
Silent Push Threat Analysts have recently exposed a sophisticated financial scam leveraging a vulnerability in X/Twitter’s advertising display URL feature to deceive users. This attack manipulates the platform’s URL display mechanism to present a legitimate-looking link, such as “From CNN[.]com,” while redirecting unsuspecting victims to a malicious cryptocurrency scam site impersonating Apple’s brand. This campaign,…
-
Guess Which Browser Tops the List for Data Collection!
Google Chrome has emerged as the undisputed champion of data collection among 10 popular web browsers studied on the Apple App Store. Collecting a staggering 20 different data types, Chrome surpasses all competitors by a significant margin. From personal contact information and precise financial details-such as payment methods and card numbers-to location data, browsing history,…
-
‘AirBorne”-Sicherheitslücken: Milliarden Apple-Geräte in Gefahr
Sicherheitsforscher von Oligo Security haben 23 Sicherheitslücken in Apple AirPlay entdeckt, die Milliarden von Apple-Geräten der Gefahr von Datendiebstahl und unberechtigtem Zugriff aussetzen. First seen on 8com.de Jump to article: www.8com.de/cyber-security-blog/airborne–sicherheitslucken-milliarden-apple-gerate-in-gefahr
-
Softwareupdate – Apple schließt Zero-Day-Schwachstellen mit Patch für iOS 18
First seen on security-insider.de Jump to article: www.security-insider.de/apple-ios-update-zero-day-schwachstellen-carplay-probleme-a-39b0e75ade847564bacdfc2804a8d88b/
-
Wormable AirPlay Flaws Enable Zero-Click RCE on Apple Devices via Public Wi-Fi
Cybersecurity researchers have disclosed a series of now-patched security vulnerabilities in Apple’s AirPlay protocol that, if successfully exploited, could enable an attacker to take over susceptible devices supporting the proprietary wireless technology.The shortcomings have been collectively codenamed AirBorne by Israeli cybersecurity company Oligo.”These vulnerabilities can be chained by First seen on thehackernews.com Jump to article:…
-
Schwachstelle in Apples Find-My-Funktion – Forscher entwickeln Tool zur Ausnutzung von Satellitenkommunikation
First seen on security-insider.de Jump to article: www.security-insider.de/satellitenkommunikation-iphones-sicherheitsluecken-a-ea2f93f9cd06f042ead5634ebc3c5aee/
-
Billions of Apple Devices at Risk from “AirBorne” AirPlay Vulnerabilities
Oligo Security uncovers >>AirBorne,
-
Apple issues global spyware threat notifications
First seen on scworld.com Jump to article: www.scworld.com/brief/apple-issues-global-spyware-threat-notifications
-
Microsoft Switches to Passkeys By Default, Pledges to Eliminate Passwords
Apple and Google also pledged to use the FIDO Alliance’s standard for biometric or PIN logins as opposed to passwords. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-microsoft-passwordless-world-password-day/
-
Cook’d: Judge says Apple lied to court in Epic case, asks Feds to mull criminal charges
CEO, senior execs ‘at every turn chose the most anti-competitive option’ First seen on theregister.com Jump to article: www.theregister.com/2025/05/01/apple_epic_lies_possible_crime/
-
Spionageangriffe erkannt: Apple warnt iPhone-Nutzer in 100 Ländern vor Spyware
Unzählige iPhone-Nutzer auf der ganzen Welt haben von Apple Spyware-Warnungen erhalten. Wer hinter den Angriffen steckt, ist allerdings unklar. First seen on golem.de Jump to article: www.golem.de/news/spionageangriffe-erkannt-apple-warnt-iphone-nutzer-in-100-laendern-vor-spyware-2505-195868.html
-
AirBorne: Schwachstellen in Apples AirPlay-Protokoll gefährden Geräte und Netzwerke
Apple Geräte (Macs, iPads, iPhones) unterstützen AirPlay zur Übertragung von Musik, Fotos und Videos zwischen Geräten. Schwachstellen im Protokoll ermöglichen es, per WiFi die AirPlay-Geräte anzugreifen und sich so im Netzwerk zu bewegen. Was ist AirPlay? AirPlay ist eine proprietäre … First seen on borncity.com Jump to article: www.borncity.com/blog/2025/05/02/airborne-schwachstellen-in-apples-airplay-protokoll-gefaehrden-geraete-und-netzwerke/
-
Apple notifies victims in 100 countries of likely spyware targeting
Two of the known victims are an Italian journalist and the right-wing Dutch author and pundit Eva Vlaardingerbroek. First seen on therecord.media Jump to article: therecord.media/apple-spyware-victims-notified-countries
-
Apple notifies new victims of spyware attacks across the world
Two alleged victims came forward claiming they received a spyware notification from Apple. First seen on techcrunch.com Jump to article: techcrunch.com/2025/04/30/apple-notifies-new-victims-of-spyware-attacks-across-the-world/
-
23 Apple AirPlay Vulnerabilities ‘Could Have Far-Reaching Impacts’
The so-called “AirBorne” flaws enable zero-click attacks and device takeover on local networks. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/news-apple-airplay-airborne-vulnerabilities/
-
Apple Passwords Review (2025): Features, Pricing, and Security
Apple Passwords provides robust security features, but is it capable of safeguarding your sensitive data? First seen on techrepublic.com Jump to article: www.techrepublic.com/article/apple-passwords-review/
-
AirBorne flaws can lead to fully hijack Apple devices
Vulnerabilities in Apple’s AirPlay protocol and SDK exposed Apple and third-party devices to attacks, including remote code execution. Oligo Security found serious flaws, collectively tracked as AirBorne, in Apple’s AirPlay protocol and SDK, affecting Apple and third-party devices. Attackers can exploit the vulnerabilities to perform zero-/one-click RCE, bypass ACLs, read local files, steal data, and…
-
Wormable AirPlay Zero-Click RCE Flaw Allows Remote Device Hijack via Wi-Fi
A major set of vulnerabilities-collectively named “AirBorne”-in Apple’s AirPlay protocol and SDK have been unveiled, enabling an array of severe attack vectors. Most critically, these flaws allow zero-click “wormable” Remote Code Execution (RCE), meaning attackers can take over Apple and third-party devices via Wi-Fi without any user interaction. The impact spans billions of devices globally, including…
-
AirBorne and Dangerous: Hacking Through the Soundwaves
Researchers Uncover Bugs in Apple’s AirPlay, Risking Takeover of Smart Devices. Vulnerabilities in wireless streaming protocol AirPlay could expose Apple operating system devices to remote code execution by enabling attackers to infiltrate networks through trusted connections. The flaws are in the software development kit used by third-party manufacturers. First seen on govinfosecurity.com Jump to article:…
-
Apple ‘AirBorne’ flaws can lead to zero-click AirPlay RCE attacks
Tags: apple, attack, data-breach, flaw, programming, rce, remote-code-execution, software, vulnerabilityA set of security vulnerabilities in Apple’s AirPlay Protocol and AirPlay Software Development Kit (SDK) exposed unpatched third-party and Apple devices to various attacks, including remote code execution. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/apple-airborne-flaws-can-lead-to-zero-click-airplay-rce-attacks/
-
Enterprise-specific zero-day exploits on the rise, Google warns
Tags: access, apple, apt, attack, china, cisco, cloud, crime, crimes, cyberespionage, detection, endpoint, exploit, finance, flaw, google, group, Hardware, incident response, injection, Internet, ivanti, korea, lessons-learned, mandiant, microsoft, mitigation, network, north-korea, remote-code-execution, russia, service, strategy, technology, threat, tool, update, vpn, vulnerability, zero-daySurge in network edge device exploitation: Of the 33 zero-day vulnerabilities in enterprise-specific products, 20 targeted hardware appliances typically located at the network edge, such as VPNs, security gateways, and firewalls. Notable targets last year included Ivanti Cloud Services Appliance, Palo Alto Networks’ PAN-OS, Cisco Adaptive Security Appliance, and Ivanti Connect Secure VPN.Targeted attacks against…
-
Millions of Apple Airplay-Enabled Devices Can Be Hacked via Wi-Fi
Researchers reveal a collection of bugs known as AirBorne that would allow any hacker on the same Wi-Fi network as a third-party AirPlay-enabled device to surreptitiously run their own code on it. First seen on wired.com Jump to article: www.wired.com/story/airborne-airplay-flaws/
-
Keeper Security optimiert Browser-Erweiterung
Die neue Browser-Erweiterung Keeper 17.1 ist ab sofort im Chrome Web Store, Apple App Store, Microsoft Edge Add-ons Store sowie im Firefox Add-ons Store verfügbar. First seen on infopoint-security.de Jump to article: www.infopoint-security.de/keeper-security-optimiert-browser-erweiterung/a40607/
-
New iOS Vulnerability Could Brick iPhones with Just One Line of Code
A security researcher has uncovered a critical vulnerability in iOS, Apple’s flagship mobile operating system. The flaw, CVE-2025-24091, which leverages the long-standing but little-known >>Darwin notification