Tag: apple
-
Apple Confirms USB Restricted Mode Exploited in ‘Extremely Sophisticated’ Attack
Cupertino’s security response team said the flaw was used in “an extremely sophisticated attack against specific targeted individuals.” The post Apple Confirms USB Restricted Mode Exploited in ‘Extremely Sophisticated’ Attack appeared first on SecurityWeek. First seen on securityweek.com Jump to article: www.securityweek.com/apple-confirms-usb-restricted-mode-exploited-in-extremely-sophisticated-attack/
-
Privacy Roundup: Week 6 of Year 2025
Tags: access, ai, api, apple, backdoor, breach, browser, cctv, chrome, control, credit-card, cybersecurity, data, data-breach, encryption, exploit, firmware, framework, germany, government, group, leak, malware, monitoring, phishing, privacy, regulation, risk, router, scam, service, software, spy, technology, threat, tool, update, vpn, vulnerability, windowsThis is a news item roundup of privacy or privacy-related news items for 2 FEB 2025 – 8 FEB 2025. Information and summaries provided here are as-is for warranty purposes. Note: You may see some traditional “security” content mixed-in here due to the close relationship between online privacy and cybersecurity – many things may overlap;…
-
Apple fixes zero-day exploited in ‘extremely sophisticated’ attacks
Apple has released emergency security updates to patch a zero-day vulnerability that the company says was exploited in targeted and “extremely sophisticated” attacks. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/apple/apple-fixes-zero-day-exploited-in-extremely-sophisticated-attacks/
-
Apple fixes iPhone and iPad bug used in an >>extremely sophisticated attack<<
Unknown attackers may have exploited a zero-day bug to access data on locked phones, according to Apple. First seen on techcrunch.com Jump to article: techcrunch.com/2025/02/10/apple-fixes-iphone-and-ipad-bug-used-in-an-extremely-sophisticated-attack/
-
Out of 6,000 requests, Apple provided UK with iCloud data only four times since 2020
The figures suggest a potential motivation behind the British government’s reported legal order to require Apple to be capable of providing iCloud content upon receipt of a valid warrant. First seen on therecord.media Jump to article: therecord.media/requests-apple-provided-four-times
-
UK’s secret Apple iCloud backdoor order is a global emergency, say critics
Security experts say the ‘draconian’ order would have global ramifications that make this a privacy ’emergency for us all’ First seen on techcrunch.com Jump to article: techcrunch.com/2025/02/10/uks-secret-apple-icloud-backdoor-order-is-a-global-emergency-say-critics/
-
Experts Dismayed at UK’s Apple Decryption Demands
Security and privacy experts have questioned a new demand from the UK Home Office on Apple’s encrypted iCloud service First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/experts-dismayed-uk-apple/
-
UK Gov demands backdoor to access Apple iCloud backups worldwide
UK secretly demands Apple create an iCloud backdoor via a Technical Capability Notice, raising privacy concerns over end-to-end encryption. The UK demands Apple to create a backdoor to access any iCloud backups, the request raises concerns about user privacy and undermines Apple’s security commitments. >>The British government’s undisclosed order, issued last month, requires blanket capability…
-
Hey, UK, Get Off of My Cloud
The United Kingdom has made a bold demand to Apple, purporting to require the company to create a backdoor to access encrypted cloud backups of all users worldwide. First seen on securityboulevard.com Jump to article: securityboulevard.com/2025/02/hey-uk-get-off-of-my-cloud/
-
Tech companies brace after UK demands back door access to Apple cloud
The UK has served a notice on Apple demanding back door access to encrypted data stored by users anywhere in the world on Apple’s cloud service First seen on computerweekly.com Jump to article: www.computerweekly.com/news/366618999/Tech-companies-brace-after-UK-demands-back-door-access-to-Apple-cloud-Tech-companies-brace-for-more
-
Core-Media-Framework Day-Schwachstelle
First seen on security-insider.de Jump to article: www.security-insider.de/apple-core-media-framework-sicherheitsluecke-a-b1e972a48d78893f3808f22de82f36b6/
-
UK Is Ordering Apple to Break Its Own Encryption
The Washington Post is reporting that the UK government has served Apple with a “technical capability notice” as defined by the 2016 Investigatory Powers Act, requiring it to break the Advanced Data Protection encryption in iCloud for the benefit of law enforcement. This is a big deal, and something we in the security community have…
-
Snoopers’ Charter: Großbritannien will Zugriff auf iCloud-Backups weltweit
Die britische Regierung verpflichtet Apple, eine Backdoor für verschlüsselte iCloud-Backups von Nutzern weltweit einzurichten. First seen on golem.de Jump to article: www.golem.de/news/snoopers-charter-grossbritannien-will-zugriff-auf-icloud-backups-weltweit-2502-193159.html
-
UK Secret Order Demands That Apple Give Access to Users’ Encrypted Data
Plus: Benjamin Netanyahu gives Donald Trump a golden pager, Hewlett Packard Enterprise blames Russian government hackers for a breach, and more. First seen on wired.com Jump to article: www.wired.com/story/uk-secret-order-apple-users-encrypted-data/
-
UK Pressures Apple to Create Global Backdoor To Spy on Encrypted iCloud Access
United Kingdom has reportedly ordered Apple to create a backdoor allowing access to all encrypted content stored in its iCloud service. The demand, issued under the U.K.’s controversial Investigatory Powers Act of 2016, has raised alarm among privacy advocates and tech experts. If implemented, this order would allow British authorities to bypass encryption protections not…
-
UK Government Reportedly Demands Access to Encrypted iCloud Files Worldwide
As reported by The Washington Post, Apple received notice of a possible request in March 2024, but the official ask occurred in January 2025. First seen on techrepublic.com Jump to article: www.techrepublic.com/article/uk-apple-encryption-icloud/
-
UK Home Office silent on alleged Apple backdoor order
Blighty’s latest stab at encryption? A secret order to pry open iCloud, sources claim First seen on theregister.com Jump to article: www.theregister.com/2025/02/07/home_office_apple_backdoor_order/
-
DeepSeek App Transmits Sensitive User and Device Data Without Encryption
A new audit of DeepSeek’s mobile app for the Apple iOS operating system has found glaring security issues, the foremost being that it sends sensitive data over the internet sans any encryption, exposing it to interception and manipulation attacks.The assessment comes from NowSecure, which also found that the app fails to adhere to best security…
-
Encryption Debate: Britain Reportedly Demands Apple Backdoor
Secret Order Seeks to Compel Apple to Weaken Encryption, Washington Post Reports. The British government has unexpectedly reignited the long-running encryption debate, reportedly issuing a secret order to Apple requiring that it provide direct access to global users’ fully encrypted cloud backups and prohibited the technology giant from alerting any targeted accountholders. First seen on…
-
UK reportedly demands secret ‘back door’ to Apple users’ iCloud accounts
The British government has reportedly issued a secret legal demand to Apple to allow access to encrypted iCloud accounts. First seen on therecord.media Jump to article: therecord.media/uk-government-reportedly-demands-backdoor-apple-icloud
-
UK government demands Apple backdoor to encrypted cloud data: report
Apple is likely to stop providing its encrypted cloud service to U.K. users First seen on techcrunch.com Jump to article: techcrunch.com/2025/02/07/uk-government-demands-apple-backdoor-to-encrypted-cloud-data-report/
-
Apple missed screenshot-snooping malware in code that made it into the App Store, Kaspersky claims
OCR plugin great for extracting crypto-wallet secrets from galleries First seen on theregister.com Jump to article: www.theregister.com/2025/02/07/infected_apps_google_apple_stores/
-
DeepSeek iOS app sends data unencrypted to ByteDance-controlled servers
Apple’s defenses that protect data from being sent in the clear are globally disabled. First seen on arstechnica.com Jump to article: arstechnica.com/security/2025/02/deepseek-ios-app-sends-data-unencrypted-to-bytedance-controlled-servers/
-
SparkCat Malware Uses OCR to Extract Crypto Wallet Recovery Phrases from Images
A new malware campaign dubbed SparkCat has leveraged a suit of bogus apps on both Apple’s and Google’s respective app stores to steal victims’ mnemonic phrases associated with cryptocurrency wallets. The attacks leverage an optical character recognition (OCR) model to exfiltrate select images containing wallet recovery phrases from photo libraries to a command-and-control (C2) server,…
-
Password Stealing Malware Attacking macOS Users Increasing Rapidly
In a concerning trend, macOS users are facing an unprecedented rise in password-stealing malware attacks. Recent cybersecurity reports reveal a 101% surge in macOS infostealers during the latter half of 2024, marking these threats as the most significant category of new malware targeting Apple devices. Infostealers such as Atomic Stealer, Poseidon Stealer, and Cthulhu Stealer…
-
How to customize Safari for private browsing on iOS
Apple’s Safari browser includes several features aimed at enhancing privacy while browsing the web. Two of the most notable privacy features are Intelligent Tracking … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/02/06/safari-privacy-features/
-
Crypto-stealing apps found in Apple App Store for the first time
A new campaign dubbed ‘SparkCat’ has been uncovered, targeting the cryptocurrency wallet recovery phrases of Android and iOS users using optical character recognition (OCR) stealers. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/mobile/crypto-stealing-apps-found-in-apple-app-store-for-the-first-time/
-
MacOS Ferret operators add a deceptive bite to their malware family
The macOS Ferret family, variants of malware used by North Korean APTs for cyber espionage, has received a new member as samples of a detection-resistant variant, Flexible-Ferret, appear in the wild.The discovery of the samples was made by SentinelOne researchers who noted the variant’s capability to evade the recent XProtect signature update that Apple pushed…
-
Apple’s macOS Kernel Vulnerability (CVE-2025-24118) Exposes Users to Privilege Escalation Attacks PoC Released
A critical privilege escalation vulnerability in Apple’s macOS kernel has been revealed, posing a significant risk to users. The flaw, identified as CVE-2025-24118, affects multiple versions of macOS, iPadOS, and macOS Sequoia. Security researcher Joseph Ravichandran (@0xjprx) from MIT CSAIL brought this issue to light, demonstrating how a race condition in the macOS XNU kernel could lead to…
-
Crypto-stealing iOS, Android malware found on App Store, Google Play
A number of iOS and Android apps on Apple’s and Google’s official app stores contain a software development kit (SDK) that allows them to exfiltrate … First seen on helpnetsecurity.com Jump to article: www.helpnetsecurity.com/2025/02/05/crypto-stealing-ios-android-malware-found-on-app-store-google-play-sparkcat-malicious-sdk/