Opsec Cyber iOS Archives

Category Archives: iOS

Security Vulnerabilities in ICEBlock

July 17 2025 By Bruce Schneier in iOS, Privacy, Security, vulnerabilities

The ICEBlock tool has vulnerabilities:

The developer of ICEBlock, an iOS app for anonymously reporting sightings of US Immigration and Customs Enforcement (ICE) officials, promises that it “ensures user...
Read more

Details about the iOS Inactivity Reboot Feature

December 2 2024 By Bruce Schneier in Apple, iOS, iPhone, Reverse Engineering, Security

I recently wrote about the new iOS feature that forces an iPhone to reboot after it’s been inactive for a longish period of time. Here are the technical details, discovered...

Critical Vulnerability in libwebp Library

September 27 2023 By Bruce Schneier in iOS, Security, vulnerabilities, Zero-day

Both Apple and Google have recently reported critical vulnerabilities in their systems—iOS and Chrome, respectively—that are ultimately the result of the same vulnerability in the libwebp...

Zero-Click Exploit in iPhones

September 13 2023 By Bruce Schneier in Apple, Exploits, iOS, iPhone, Security, vulnerabilities

Make sure you update your iPhones:

Citizen Lab says two zero-days fixed by Apple today in emergency security updates were actively abused as part of a zero-click exploit chain...
Read more

Apple silently pulls its latest zero-day update – what now?

July 11 2023 By Paul Ducklin in Apple, iOS, Security, Vulnerability, Zero-day

Previously, we said "do it today", but now we're forced back on: "Do not delay; do it as soon as Apple and your device will let you."

Urgent! Apple fixes critical zero-day hole in iPhones, iPads and Macs

July 11 2023 By Paul Ducklin in 0-day, Apple, iOS, Security, Vulnerability, Zero-day

Don't delay, do it today. This is a code-implantation bug in WebKit that attackers already know how to exploit.

Apple patch fixes zero-day kernel hole reported by Kaspersky – update now!

June 22 2023 By Paul Ducklin in Apple, iOS, Patch, Security, Vulnerability, Zero-day

Apple didn't use the words "Triangulation Trojan", but you probably will.

Operation Triangulation: Zero-Click iPhone Malware

June 9 2023 By Bruce Schneier in Exploits, Forensics, iOS, iPhone, Malware, Security

Kaspersky is reporting a zero-click iOS exploit in the wild:

Mobile device backups contain a partial copy of the filesystem, including some of the user data and service databases....
Read more

New Zero-Click Exploits against iOS

April 20 2023 By Bruce Schneier in Apple, Exploits, iOS, iPhone, Security

Citizen Lab has identified three zero-click exploits against iOS 15 and 16. These were used by NSO Group’s Pegasus spyware in 2022, and deployed by Mexico against human rights...