#AppleSecurity

[jjbizconsult]

Say goodbye to iPhone data theft! Apple's Stolen Device Protection keeps your secrets safe, even if stolen.

[digitalsitepro]

Digital Sitepro : Mastering WordPress

[osintelligence]

https://bit.ly/450kuxE - 🛡️ A recent cybersecurity analysis highlighted a surge in "Realst" infostealer malware attacks, specially targeting macOS devices. The malware, hidden within fake blockchain games, is designed to extract cryptocurrency wallet data and browser passwords. Notably, the campaign seems prepared for the upcoming macOS 14 Sonoma release. #CyberSecurity #MacOS #Malware #RealstInfostealer 🕹️ The distribution strategy of Realst involves numerous malicious websites advertising illegitimate blockchain games, each with associated social media accounts. Potential victims are directly contacted via social media, tricking them into installing the infostealer under the guise of a game. #CyberThreat #SocialEngineering 📦 Infostealer malware is primarily distributed through malicious .pkg installers containing a trio of harmful scripts. The scripts act as a Firefox infostealer, a password extractor, and an uninstaller. Surprisingly, the uninstaller was found to be non-malicious. #CyberAttack 🚀 Other versions of the Realst stealer come packaged within applications via .dmg disk images. Some malware samples were even code-signed with an Apple Developer ID, which has since been revoked. However, ad-hoc code-signed samples will continue to launch since their signatures cannot be remotely revoked. #AppleSecurity #CodeSigning 💻 From a behavior standpoint, Realst samples appear similar across variants and exfiltrate key user data. Targeted browsers include Firefox, Chrome, Opera, Brave, and Vivaldi, with Safari being notably absent. Also, the Telegram app seems to be on the hit list. #BrowserSecurity #DataExfiltration 🔍 Analysis identified 16 variants of Realst across 59 samples, classified into four major families (A, B, C, and D). Each variant utilizes unique tactics, but their main goal remains to steal users' data and credentials. About a third of the samples are prepped for macOS 14 Sonoma. #MalwareAnalysis 🚨 The efforts invested in the Realst campaign, the creation of fake game sites, and the use of social engineering indicate a serious threat targeting macOS users for data and crypto wallet theft. As blockchain games rise in popularity, users and security teams must exercise extreme caution when downloading and running such games.

[tilos-tagebuch]

"In total, six of the macOS flaws that Apple patched this week allowed for arbitrary code execution, some at the kernel level. Every operating system suffers from vulnerabilities, and MacOS is no exception." 😳 So much for the 'walled garden' concept 🧱😬🧱 They may keep you locked in, but not necessarily all the bads things out!! 🙄 Sad truth is, every technology has its flaws - as long as humans are involved in creating them !! 🤷🏻🤷🏽‍♂️ Stay Vigilant & Stay Safe! 😷

[sattworld]

#iPhone 気をつけてくださいね🙄 多分広告か何かをタップすると開く？ スルーしたら何事もなく終わるみたいやけど。 #ハッカーに追跡されています #appstore #接続を保護 #applesecurity https://www.instagram.com/p/CLMK8KFDDZt/?igshid=1o77azsvvtwa4

[hacknews]

Researcher Discovers Critical Vulnerability and Was Awarded $100,000 #apple #applebugbounty #applehackingvulnerability #appleid #applepatch #applesecurity #authentication #bug #flaw #jsonwebtoken #jwt #oauthtokens #signinwithappleflaw #signinwithapplevulnerability #sign-inwithapple #thirdpartyapps #userauthentication #vulnerability #hacking #hacker #cybersecurity #hack #ethicalhacking #hacknews

[sprinsingapore-blog]

Apple is making a series of security changes for the new year – yet according to new research from Appthority, only 3% of enterprise apps are fully compliant with the new security mandate. In June 2016, Apple announced that App Transport Security (ATS) will become a requirement for new App Store apps from 1 January 2017. ATS, which was introduced in iOS 9, forces an app to connect to web services over an HTTPS connection rather than HTTP to keep data secure while in transit by encrypting it.

Read more about Upcoming Apple Security requirements.

[hacknews]

Researcher Discovers Critical Vulnerability and Was Awarded $100,000 #apple #applebugbounty #applehackingvulnerability #appleid #applepatch #applesecurity #authentication #bug #flaw #jsonwebtoken #jwt #oauthtokens #signinwithappleflaw #signinwithapplevulnerability #sign-inwithapple #thirdpartyapps #userauthentication #vulnerability #hacking #hacker #cybersecurity #hack #ethicalhacking #hacknews

[hacknews]

Apple Address Critical Vulnerabilities Allowing Webcam Hijacking #apple #applebugbounty #appledatasecurity #applehackingvulnerability #appleios #appleiosbugs #appleiphone #applemac #applepatch #applesafari #applesecurity #applevulnerability #bug #flaw #vulnerabilities #vulnerability #zero-dayflaw #zero-dayvulnerability #zeroday #hacking #hacker #cybersecurity #hack #ethicalhacking #hacknews

[hacknews]

Apple Patched AirDos Vulnerability With iOS 13.3 Along With Other Security Fixes #airdos #airdropbug #airdropshare #airdropvulnerability #apple #appledatasecurity #appleios #appleios13 #appleiphone #applereleasedios13.3 #applesecurity #bluetooth #denialofservice #dosattack #ios13 #ios13privacy #ios13.3 #iosairdrop #iphone #iphoneairdrop #iphonebug #iphonestuck #location #hacking #hacker #cybersecurity #hack #ethicalhacking #hacknews

[hacknews]

iOS 13 Now Warns Users Of Background Apps Secretly Tracking Location #apple #appledatasecurity #appleios #appleios13 #appleiphone #applesecurity #backgroundlocationcontrol #backgroundlocationtracking #bluetooth #ios13 #ios13privacy #location #locationdata #locationdatasharing #locationhistory #hacking #hacker #cybersecurity #hack #ethicalhacking #hacknews

[hacknews]

Apple Admit to Sharing iOS 13 Safari Browsing History With Chinese Firm Tencent Holdings #apple #appleios #appleios13 #appleiphone #applesafari #applesecurity #appleshareddata #browserdata #browsingdata #browsinghistory #china #chinabannedgoogle #chinathreatensus #datasharing #iosusers #safebrowsing #tencent #tencentholdings #uschinaconflict #hacking #hacker #cybersecurity #hack #ethicalhacking #hacknews

[hacknews]

Apple Patched An iOS 13.1 Bug That Granted ‘Full Access’ To Third-Party Keyboards #apple #appleios #appleios13 #appleiosbugs #appleiphone #applepatch #applereleasedios13.1.1. #applereleasesios13.1 #applesecurity #applevulnerability #cve-2019-8779 #facetimeexploit #ios #ios13 #ios13bug #ios13flaw #ios13keyboardfullaccessflaw #ios13vulnerability #ios13.1 #ios13.1bug #ios13.1vulnerability #ioskeyloggingflaw #ioskeyloggingvulnerability #keyboardhack #keyboard #keylogging #keylogginganyone #keystrokes #hacking #hacker #cybersecurity #hack #ethicalhacking #hacknews