Pointer Authentication Codes News Today

Apple has not yet patched a WebKit vulnerability present in iOS and macOS despite a fix for the flaw being available for weeks.

Apple has not yet patched a WebKit vulnerability present in iOS and macOS despite a fix for the flaw being available for weeks. Credit: WebKit

Failure to check the object type provides an opportunity for an attacker to create a type confusion error capable of crashing Safari. Developing a more serious exploit that enables arbitrary code execution would require additional work to create exploit primitives that bypass WebKit defenses like Pointer Authentication Codes (cryptographic signatures for pointers on Arm-compatible devices). Becker nonetheless suggests this malware defense can be overcome by attackers, pointing to recent Project...

iOS 14.5 to Make Zero-Click Attacks Significantly Harder Monday February 22, 2021 8:05 am PST by Hartley Charlton Apples impending iOS and iPadOS 14.5 update will make zero-click attacks considerably more difficult by extending PAC security provisions, according to Apple has made a change to the way in which it secures its code in the latest betas of iOS 14.5 and iPadOS 14.5 to make zero-click attacks much harder. The change, spotted by security researchers, has now been confirmed by Apple and...

New language was discovered in iOS 14.5 beta 2 It focuses on zero-click or 0-click hacking. These are sophisticated attacks. Apples about to make it much harder for hackers to take control of unsuspecting iPhones. The companys second iOS 14.5 beta includes language that focuses on a hacking technique known as zero-click, or 0-click, according to Motherboard. With zero-click attacks, hackers can break into a device without the end-user performing a task. Because no interaction is required, these...

Apple Updates Platform Security Guide, Says Kernel Extensions Wont Be Supported on Future Apple Silicon Macs Thursday February 18, 2021 11:00 am PST by Joe Rossignol Apple today shared an updated version of its Platform Security Guide [PDF], providing a comprehensive overview of the latest security advancements across iOS 14, iPadOS 14, macOS Big Sur, tvOS 14, watchOS 7, and more. For example, the guide provides security details about Safaris optional Password Monitoring feature on iOS 14 and m...

Many of Ian Beer’s previous work has led to a jailbreak tool being available for the latest release of iOS. However, before you get your hopes up, Ian Beer has currently only shared a vulnerability in iOS 14. This vulnerability needs to be turned into an exploit before a developer could use it to jailbreak iOS 14 – iOS 14.1. That’s a lot of work and it remains to be seen which developer or jailbreak team puts the effort into jailbreaking iOS 14 and iPadOS 14. Another issue with the vulner...