SecurityWeek

‘DarkSword’ iOS Exploit Kit Used by State-Sponsored Hackers, Spyware Vendors

The DarkSword iOS exploit chain was used by the Russian APT behind the Coruna exploit in attacks targeting Ukraine.

iPhone exploit DarkSword has been released in the wild: How to protect yourself

Uh-oh. Now anyone can easily use it.
TechSpot

New iPhone bootROM exploit might lead to permanent jailbreak on hundreds of millions of devices

Uh oh Apple: Someone discovered an "unpatchable" exploit on iPhones that may allow them to be permanently jailbroken. The vulnerability is at the hardware level, so even updating iOS will not patch ...
9to5google

Dirty Pipe: What you need to know about the major exploit affecting Pixel 6 and Galaxy S22 devices [Updated]

The security world has been abuzz about a new Linux exploit called “Dirty Pipe,” which also affects Android 12 devices like Galaxy S22 and Pixel 6. Here’s everything you need to know about “Dirty Pipe ...
Threat Post

Cisco Patches Critical Flaw After PoC Exploit Code Release

A critical path-traversal flaw (CVE-2020-27130) exists in Cisco Security Manager that lays bare sensitive information to remote, unauthenticated attackers. A day after proof-of-concept (PoC) exploit ...
Threat Post

Millions of Routers, IoT Devices at Risk from BotenaGo Malware

BotenaGo, written in Google’s Golang programming language, can exploit more than 30 different vulnerabilities. Newly surfaced malware that is difficult to detect and written in Google’s open-source ...
9to5google

Severe MediaTek exploit affects millions of Android devices, some may never be patched

Overall, Android is a pretty secure operating system, but bugs and exploits can form anywhere, and eventually they do. This week, a severe security exploit was revealed relating to MediaTek chipsets, ...
Hosted on MSN

Hackers exploit WhatsApp device-linking feature to hijack accounts

Hackers can hijack WhatsApp accounts without ever cracking passwords or encryption GhostPairing attacks exploit legitimate device-linking features to gain full account access Users are tricked by fake ...
Bleeping Computer

Exploit out for critical Realtek flaw affecting many networking devices

Exploit code has been released for a critical vulnerability affecting networking devices with Realtek’s RTL819x system on a chip (SoC), which are estimated to be in the millions. The flaw is ...
Que.com on MSN

Stryker cyberattack sparks new risks in device management tools

The recent cyberattack involving Stryker has fueled renewed concern across healthcare IT: device management tools—once viewed primarily as operational necessities—are ...
Ars Technica

Developer of Checkm8 explains why iDevice jailbreak exploit is a game changer

Often, when new iOS jailbreaks become public, the event is bittersweet. The exploit allowing people to bypass restrictions Apple puts into the mobile operating system allows hobbyists and researchers ...
Android

PSA: Samsung Device Owners of GS2, GS3, OG Note, Note 2 & Note 10.1 Beware of Serious Malware Exploit

Earlier we bought you news that there was a serious security flaw that could affect devices running one of Samsung’s Exynos 4210 or 4412 processors and that a lot of Samsung devices were at risk the ...