Zero-Click Exploit in iPhones
September 13 2023Make sure you update your iPhones:
Citizen Lab says two zero-days fixed by Apple today in emergency security updates were actively abused as part of a zero-click exploit chain...
Read more
WYSIWYG is short for "what you see is what you get". Except when it isn't...
Read moreS3 Ep145: Bugs With Impressive Names!
July 28 2023Fascinating fun (with a serious and educational side) - listen now! Full transcript available inside.
Read moreS3 Ep141: What was Steve Jobs’s first job?
June 30 2023Latest episode - listen now! (Full transcript inside.)
Read moreAll Apple users have zero-days that need patching, though some have more zero-days than others.
Read moreThis a good example of a security feature that can sometimes harm security:
Apple introduced the optional recovery key in 2020 to protect users from online hackers. Users...
Read more
New Zero-Click Exploits against iOS
April 20 2023Citizen Lab has identified three zero-click exploits against iOS 15 and 16. These were used by NSO Group’s Pegasus spyware in 2022, and deployed by Mexico against human rights...
Read moreBypassing a Theft Threat Model
April 13 2023Thieves cut through the wall of a coffee shop to get to an Apple store, bypassing the alarms in the process.
I wrote about this kind of thing in...
Read moreA bug to hack your browser, then a bug to pwn the kernel... reported from the wild by Amnesty International.
Read more
Recent Comments