Apple Hack News Today

India’s cybersecurity agency CERT-In today sent out a warning about a 'high' severity flaw that allows remote code execution attacks on a wide range of Apple products. The warning has been issued for several Apple products including iPhones, iPads, MacBooks running on various operating systems, Apple Watch and other devices.

Govt started exerting pressure on Apple to downplay political impact of the warnings, demanded they come up with 'alternative explanations'

Hackers can now use a fake lockdown mode to deceive iPhone users. According to Tech Radar, threat actors can now implement a fake lockdown mode for iPhone users, allowing them to run malware behind a facade that the device is under a protective state, citing a report from 'Jamf Threat Labs' as source.

The team will collaborate with the Indian Computer Emergency Response Team (CERT-In) to further examine the matter.

Cybersecurity experts believe that the state-sponsored attacker alert sent to some popular politicians should be investigated and users should be made aware of the current status of the threat

On August 23, Apple clarified on its website that their threat notifications were designed to inform and assist users who might be targeted by state-sponsored attackers.

Opposition leaders, including TMC's Mahua Moitra, Congress leader Shashi Tharoor, AAP's Raghav Chadha and Shiv Sena UBT's Priyanka Chaturvedi received Apple messages, saying "state-sponsored attackers" might be targeting their iPhones.

After a lot of outrage, the tech giant Apple has clarified that it “does not attribute the threat notifications to any specific state sponsored attacker…detecting such attacks relies on threat intelligence signals that are often imperfect and incomplete.”

The update patches bugs found in the system software of Apple devices that were reportedly being used by clients of an Israeli company to spy on users.

The threat actor also offers additional services such as a web panel for managing victims, meta mask brute-forcing to steal seed and private keys, a crypto checker, and a dmg installer, after which the logs are shared via Telegram.