HackDig : Dig high-quality web security articles

Apple fixes bug that breaks iPhone WiFi when joining rogue hotspots

Apple has rolled out security updates to address dozens of iOS and macOS vulnerabilities, including a severe iOS bug dubbed WiFiDemon that could lead to denial of service or arbitrary code execution.The vulnerability, tracked as CVE-2021-30800 and a zero-day bug when security researcher Carl Schou publicly disclosed it, was fixed by Apple with
Publish At:2021-07-23 15:38 | Read:134 | Comments:0 | Tags:Security Apple

Apple iPhone patches are out – no news if recent Wi-Fi bug is fixed

byPaul DucklinIt’s already nearly two months since Apple’s last security update to iOS 14, which was back on 2021-05-24 when iOS 14.6 appeared.So we weren’t surprised to see that another patch is out, officially listed [2021-07-19] as covering iOS (now on 14.7), tvOS (now also 14.7) and watchOS (now on 7.6).Annoyingly, there’s no ment
Publish At:2021-07-22 00:50 | Read:167 | Comments:0 | Tags:Apple iOS Vulnerability Exploit ios iPhone vulnerability

iPhone WiFi bug morphs into zero-click hacking, but there's a fix

Security researchers investigating a bug that crashed the Wifi service on iPhones found that it could be exploited for remote code execution without user interaction.When initially disclosed, the bug could disable an iPhone’s WiFi connection after trying to connect to a network with a name (SSID) that included a special character.Security researcher Ca
Publish At:2021-07-19 20:05 | Read:144 | Comments:0 | Tags:Apple hack

WifiDemon Zero-Click iOS Vulnerability: Zimperium Customers Are Protected

On July 14, 2021, the world became aware of WifiDemon, a critical zero-touch remote-code execution vulnerability impacting iOS devices. Research conducted and published by the ZecOps Mobile EDR team has proven that what was thought to be a network crash bug is in actuality a security risk for iOS devices. Variations of the vulnerability impact iOS 14.0 to 1
Publish At:2021-07-14 16:30 | Read:131 | Comments:0 | Tags:iOS Mobile Security Mobile Threat Defense News Apple vulnera

Don’t get tricked by this crashtastic iPhone Wi-Fi hack!

byPaul DucklinAbout a month ago, a security researcher revealed what turned out to be zero-day bug in Apple’s Wi-Fi software, apparently without meaning to:After joining my personal WiFi with the SSID “%p%s%s%s%s%n”, my iPhone permanently disabled it’s WiFi functionality. Neither rebooting nor changing SSID fixes it :~) pic.twitter.com/2eue90JFu3&mdash
Publish At:2021-07-12 13:52 | Read:143 | Comments:0 | Tags:Apple iOS Vulnerability hack

Shortcuts Are Coming to macOS – What Does This Mean, and How Secure Are They?

macOS has long had automation tools that can help you save time performing complex tasks, or tasks you carry out often. From AppleScript to Automator, these tools have been available with variable learning curves, and many people leverage these tools regularly. iOS/iPadOS 12 added Shortcuts, another automation tool, to that platform, and now Apple is addin
Publish At:2021-07-06 09:10 | Read:208 | Comments:0 | Tags:Apple Shortcuts

Microsoft exec reveals “routine” secrecy orders from government investigators

Microsoft executive Tom Burt told Congressional lawmakers Wednesday that Federal law enforcement agencies send “routine” secret orders for customer information from the Seattle-based company, numbering anywhere from 2,400 to 3,500 such requests a year. “While the recent news about secret investigations is shocking, most shocking is just how routine secrec
Publish At:2021-07-01 16:30 | Read:186 | Comments:0 | Tags:Government Apple cloud Department of Justice facebook Google

Your iPhone's WiFi will break after you join this hotspot

​A new iPhone bug has come to light that breaks your iPhone's wireless functionality by merely connecting to a specific WiFi hotspot.Once triggered, the bug would render your iPhone unable to establish a WiFi connection, even if it is rebooted or the WiFi hotspot is renamed.A bug like this could be exploited by malicious actors planting rogue "fre
Publish At:2021-06-19 12:12 | Read:281 | Comments:0 | Tags:Security Apple

Patch now! Apple fixes in-the-wild iPhone vulnerabilities

Apple has fixed two vulnerabilities in Safari’s WebKit component, announcing it is aware of a report that they may have been actively exploited. Both vulnerabilities could be abused by maliciously crafted web content that could lead to arbitrary code execution: In other words, the bugs let rogue websites do things on your phone without your permission.
Publish At:2021-06-15 12:45 | Read:248 | Comments:0 | Tags:Exploits and vulnerabilities Mac Apple cve-2021-30761 cve-20

Apple fixes ninth zero-day bug exploited in the wild this year

Apple has fixed two iOS zero-day vulnerabilities that "may have been actively exploited" to hack into older iPhone, iPad, and iPod devices.The two bugs (tracked as CVE-2021-30761 and CVE-2021-30762) are caused by memory corruption and use after free issues in the WebKit browser engine, both found and reported by anonymous researchers
Publish At:2021-06-15 06:47 | Read:317 | Comments:0 | Tags:Security Apple exploit

Apple Announces New Features in iOS 15, iPadOS 15, and macOS Monterey

It’s a bumper year for new features in Apple’s operating systems, iOS 15, iPadOS 15, and macOS Monterey. Monday’s preview at the Worldwide Developer Conference lasted nearly two hours, with a wide range of features from Safari to Mail, and from productivity to privacy. Apple’s operating systems are getting a big update this fall, wi
Publish At:2021-06-08 15:24 | Read:169 | Comments:0 | Tags:Apple iOS iPadOS macOS watchOS IOS

Apple’s New Privacy Features for iOS 15, iPadOS 15, and macOS Monterey

Apple made its first presentation yesterday of its 2021 vintage of operating systems: iOS 15, iPadOS 15, macOS Monterey, and watchOS 8. In addition to some new features to increase productivity, there are many new privacy features that give users more control over their data. And Apple has announced iCloud+, a privacy-focused service available to all users
Publish At:2021-06-08 07:36 | Read:339 | Comments:0 | Tags:Apple privacy IOS

M1RACLES, the unpatchable bug that impacts new Apple M1 chips

A security expert has discovered a vulnerability in Apple M1 chips, dubbed M1RACLES, that cannot be fixed. Software engineer Hector Martin from Asahi Linux has discovered a vulnerability in the new Apple M1 chips, tracked as CVE-2021-30747, that was named M1RACLES. The expert pointed out that the issue can only be fixed with a redesign of the circuits
Publish At:2021-05-27 03:41 | Read:417 | Comments:0 | Tags:Breaking News Security Apple Apple M1 chip Cybersecurity cyb

What is Incognito mode? Our private browsing 101

Incognito mode is the name of Google Chrome’s private browsing mode, but it’s also become the catch-all term used to describe this type of web surfing, regardless of the browser being used. Some call it Private Mode, others call it Private Browsing. Apple almost certainly got there first, yet Chrome’s 2008 creation has largely become the generic name for all
Publish At:2021-05-25 14:33 | Read:411 | Comments:0 | Tags:Privacy Apple browser chrome cookies Edge firefox Google inc

Hands On with Apple’s New M1 iMac and M1 iPad Pro

We’ve finally got the second delivery of Apple’s M1 Macs, after the first salvo, last fall, with updated versions of the Mac mini, MacBook Air, and 13" Mac Pro. But these models were simply new gets in old clothes; the new 24" iMac has a totally new design, replacing the older 21.5" model. This new iMac increases the display from
Publish At:2021-05-25 13:40 | Read:270 | Comments:0 | Tags:Apple iMac iPad iPad Pro

Tag Cloud