New video provides a behind-the-scenes look at Talos ransomware hunters
Summary: Apple released an emergency patch for all its operating systems covering two zero-click vulnerabilities, CVE-2023-32434 and CVE-2023-32435, that could let an attacker completely take over a targeted device and were reportedly used to compromise phones in Russia. The flaws were part of the Triangulation spyware found on iPhones of Kaspersky employees, and Apple said CVE-2023-32434 may have been actively exploited against iOS versions released before iOS 15.7.
Key Takeaway: Two zero-click bugs that hand over an entire device, tied to phones belonging to employees of a security company, mean the patch-and-reboot step is the only thing standing between a targeted user and full compromise.
Read the original at Cisco Talos ↗
- Topics
- Malware
- Mentions
- CVE-2023-32434CVE-2023-32435
- Related
- CVE-2023-32435: Apple Multiple Products Web Kit Memory Corruption Vulnerability Known Exploited Vulnerabilities · Jun 23, 2023CVE-2023-32434: Apple Multiple Products Integer Overflow Vulnerability Known Exploited Vulnerabilities · Jun 23, 2023