Tag: ios
37 articles
DarkSword Exploit Chain Spreads Across Threat Actors
A single iOS exploit chain, known as DarkSword, has been spreading rapidly among threat actors, allowing multiple groups to fully compromise iPhones across several countries. This compact, multi-vulnerability exploit leverages zero-day vulnerabilities to achieve complete device takeover, and was first detected in the wild in November 2025.
Kaspersky Uncovers Coruna Exploit Kit Linked to Operation Triangulation
Kaspersky's researchers have made a significant discovery: the Coruna exploit kit, now targeting iPhones, uses an updated kernel exploit linked to the notorious Operation Triangulation. This finding highlights the evolving threat landscape, where offensive code is repurposed to target new devices.
Google Exposes Sophisticated iPhone Hacking Tool Likely Tied to US Government
Imagine a single website visit being all it takes to secretly install malware on your iPhone, bypassing every defense along the way - that's the alarming reality uncovered by Google's security researchers. They've discovered a sophisticated hacking tool, dubbed Coruna, that exploits 23 iOS vulnerabilities to silently compromise devices.
WhatsApp Exposes Italian Users to Spyware via Fake iOS App
WhatsApp has alerted around 200 users, mostly in Italy, about a sneaky spyware attack that hit them after they downloaded a fake version of the app for iOS. This alarming incident raises a crucial question: how can you trust that the app on your phone is genuine?
DarkSword Threatens iOS with Alarming Russian Cyberattack
A new Russian cyberattack has been detected targeting iOS devices, with a state-sponsored threat group linked to a sophisticated spear-phishing campaign that's got everyone on high alert. Here's what you need to know to protect yourself from this alarming threat.
Chrome updates: Exclusive rapid fixes for safer browsing
Chrome updates just went into overdrive — Google will push security fixes every two weeks across desktop, Android and iOS to shrink the window attackers have to weaponize bugs. Enterprises can still opt into an eight‑week Extended Stable channel for predictable testing and rollouts.
Apple bug bounty: Stunning $5M Boost — Best Move
Apple just doubled its top direct bug bounty and added bonuses that can push total payouts to $5M—a clear signal it’s serious about paying for the most dangerous fixes. That boost could speed patches, entice top researchers away from gray markets, and reshape how the industry rewards the people who keep our devices safe.
hardcoded secrets: Stunning Risky Mobile Crisis
One in three Android apps — and over half of iOS apps — are leaking sensitive data through insecure APIs and hardcoded secrets, putting your personal info and company systems at risk. Luckily, with smarter developer practices, better tooling and a few simple precautions, we can close those easy doors before attackers walk through.
CVE-2025-43300 Must-Have Patch — Critical Security Risk
Apple has backported a fix for CVE-2025-43300 — a high‑severity ImageIO flaw actively exploited in the wild — so update now to block image‑based attacks that can crash or hijack your device. If you can’t upgrade, install Apple’s backported updates for older iOS, iPadOS and macOS builds and be extra cautious opening unexpected images.
zero-day vulnerability: Urgent Must-Install Critical Patch
Apple has released an emergency patch for a zero‑day likely already being exploited — update your iPhone, iPad, and Mac now to protect your data, privacy, and device integrity.
iOS and macOS zero-day: Urgent Critical Threat
Heads up: Apple has urgently patched an actively exploited iOS and macOS zero-day — update your devices now to stay protected.
ICEBlock privacy vulnerabilities: Stunning Risky Flaws
ICEBlock markets itself as a privacy-first way to report ICE activity, but experts warn that device metadata, location services, push notifications, and cloud backups can still expose users. Approach the app with caution—ask for clear transparency, independent audits, and minimal permissions before relying on it.
ICEBlock privacy vulnerabilities: Stunning Risk Exposed
ICEBlock promised anonymous reporting of ICE sightings, but security experts warn that iOS metadata, system services, and third‑party tools can still expose users—turning a civic tool into a potential risk for vulnerable people. Before relying on apps like this, demand transparent audits, strict privacy-by-design, and clear limits on metadata collection.