Collaborate Disseminate
The flaw is a rare ‘unquoted path class’ described as “so thoroughly documented that you would expect programmers to be well aware…” But that’s not the case. Continue reading Update now! Windows users targeted by iTunes Software Updater zero-day
This malicious O.MG Lightning cable has come a long way, with extensive work on the kinds of payload it can deliver. Continue reading O.MG! Evil Lightning cable about to hit mass distribution
A few days ago, movie editors started reporting that Mac Pros running Avid software were crashing throughout Hollywood. Continue reading Chrome cripples movie studio Mac Pros
Apple released fixes for various products this week, including one for a bug that has been public with proof-of-concept code for two months. Continue reading Apple’s July patchfest fixes bugs in multiple products
A researcher has found a way to abuse synthetic clicks in macOS “Catalina”, and it hasn’t even shipped yet. Continue reading Synthetic clicks and the macOS flaw Apple can’t seem to fix
Apple’s update patches 51 iOS holes, the more serious of which include bugs in Safari, Keychain and FaceTime. Continue reading Apple patches 51 security flaws with iOS 12.2 update
Google’s Project Zero researchers have revealed a “high severity” macOS security flaw nicknamed ‘BuggyCow’ which Apple appears to be in no rush to patch. Continue reading Google reveals BuggyCow macOS security flaw
An Argentinian has garnered $1m in bug bounties, while a German researcher has given up on getting any bounty at all from Apple. Continue reading Apple gets bug for free, while world sees first $1m bug hunter
Researchers have revealed how malicious Thunderbolt and PCI Express (PCIe) peripherals could be used to compromise computers running macOS, Windows, Linux and FreeBSD. Continue reading Thunderclap: Apple Macs at risk from malicious Thunderbolt peripherals
Time is money, baby: Jay Brodsky claims that Apple’s 2FA “intermeddling” takes minutes out of his day, causing “economic loss.” Continue reading Apple sued for ‘forcing’ 2FA on accounts