Apple patches new flaws reportedly exploited in zero-day attacks

According to the Two members of Project Zero, four of the six security bugs can lead to the execution of malicious code on a remote iOS device, with no user interaction needed in the new iMessage exploit reported by google zero-day. All an attacker needs to do is to send a malformed message to a victim’s phone, and the malicious code will execute once the user opens and views the received item. In total there are six serious zero-day vulnerabilities found in iOS but and not yet all fixed. iMessage: memory corruption when decoding NSKnownKeysDictionary1The bugs were discovered by Silvanovich

The post Apple patches new flaws reportedly exploited in zero-day attacks appeared first on iCloud Security and iOS Bug Hunting.

from iCloud Security and iOS Bug Hunting https://ift.tt/2ZjaHkB
via IFTTT