A new report by Amnesty International reveals that NSO Group’s Pegasus spyware was used to target iPhones belonging to Serbian journalists and activists. The attacks were conducted using a zero-click...
Jamf Threat Labs has identified a vulnerability in Apple’s Transparency, Consent, and Control (TCC) security framework. Designated as CVE-2024-44131, this flaw enables malicious applications to bypass user consent mechanisms and...
The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning about three actively exploited vulnerabilities affecting Apple and Oracle products. These flaws, added to CISA’s Known Exploited Vulnerabilities...
Security researcher Snoolie K has published an in-depth analysis of a significant security flaw in WorkflowKit, which has been assigned CVE-2024-27821. This vulnerability, dubbed the “WorkflowKit Race Vulnerability,” targets the...
Apple users are urged to update their devices immediately following the discovery of two critical zero-day vulnerabilities actively exploited in the wild. These vulnerabilities, CVE-2024-44308 and CVE-2024-44309, leave millions of...
In a recent analysis, cybersecurity researchers Hichem Maloufi and Christian Mina detailed CVE-2024-44258, a symlink vulnerability affecting Apple’s ManagedConfiguration framework and the profiled daemon. This vulnerability allows attackers to manipulate...
In a recent report, Hunt researchers uncovered a sophisticated phishing campaign suspected to be linked to North Korean threat actors, primarily targeting users of Naver, South Korea’s largest tech platform....
Apple has introduced a Virtual Research Environment (VRE) to provide public access for testing the security of its Private Cloud Compute (PCC) system. Additionally, the company has open-sourced several critical...
A new report from Unit 42 researchers has uncovered significant weaknesses in macOS’s Gatekeeper security mechanism, which could allow malicious applications to bypass Apple’s verification process and execute harmful code...
In an unexpected turn of events, Apple has pulled the plug on the iPadOS 18 update for its M4 iPad Pro models after a wave of user reports claiming the...
Once Lost Mode is activated on an Apple device, it is incredibly difficult to disable unless done by the original owner or with the correct password. Without deactivating Lost Mode,...
An open-source project on GitHub called Docker-OSX allows users to effortlessly run Apple’s OSX and macOS systems through containers, a method akin to virtual machines but significantly more convenient than...
The U.S. regulatory body’s antitrust case against Google has recently seen significant developments. A U.S. federal judge has ruled that Google’s monopolistic dominance in the search and advertising markets constitutes...
Apple has recently made its homomorphic encryption technology, used to protect user privacy and security in its services, available through an open-source Swift package, facilitating easier implementation by developers to...
Apple has confirmed that macOS systems are vulnerable to a severe OpenSSH vulnerability dubbed “regreSSHion” (CVE-2024-6387). This unauthenticated remote code execution (RCE) flaw could allow attackers to gain full root...
Support Securityonline.info site. Thanks!
