246

0-Day Remote iPhone Full Access Being Abused, Update Immediately (citizenlab.ca)

submitted 3 years ago by OsrsNeedsF2P@lemmy.ml to c/privacy@lemmy.ml

18 comments fedilink hide all child comments

all 22 comments

sorted by: hot top new old

[-] OsrsNeedsF2P@lemmy.ml 70 points 3 years ago

Couldn't think of a better title, TL;DR via receiving an iMessage with a specially crafted image, an attacker can get full access to your device. Update iOS immediately to resolve the issue

[-] fartsparkles@sh.itjust.works 35 points 3 years ago

PSA: Android just published a patch for a very similar vulnerability in their September Security release. You should update your Android devices ASAP.

[-] FederalAlienSmuggler@feddit.de 14 points 3 years ago

Which CVE is that and where can i read a description of how this vulnerability is being used?

[-] fartsparkles@sh.itjust.works 6 points 3 years ago

CVE-2023-35674 No real details published yet but Google discussed it in their September security bulletin.

[-] DoucheBagMcSwag@lemmy.dbzer0.com 18 points 3 years ago

Damn…so this isn’t the fun kernel level access exploit.

This is the boring, my data could be compromised exploit.

[-] gamey@feddit.rocks 11 points 3 years ago

Fuck, the NSO group managed that shit again?!

[-] pineapplelover@lemm.ee 7 points 3 years ago* (last edited 3 years ago)

Article missing, here is the archive link. https://web.archive.org/web/20230908134811/https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/

Edit: able to access now but I'll leave it here just in case.

[-] hollyberries@lemmy.blahaj.zone 5 points 3 years ago

It looks like I need to make some space for an update -.-

[-] AzzyDev@beehaw.org 3 points 3 years ago

Is this fixed if using the iOS 17 Beta?

[-] kryllic@programming.dev 1 points 3 years ago

I'd assume in the next public/developer preview, yeah

[-] Cwilliams@beehaw.org 3 points 3 years ago

I just relistened to Dark Net Diaries episode about this! (episode 100, titled NSO) Highly Recommend

[-] darcy@sh.itjust.works 2 points 3 years ago

ios "the more secure choice" try not to have a 0-day exploit challenge

this post was submitted on 08 Sep 2023

246 points (98.8% liked)

Privacy

51366 readers

1388 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Posting a link to a website containing tracking isn't great, if contents of the website are behind a paywall maybe copy them into the post
Don't promote proprietary software
Try to keep things on topic
If you have a question, please try searching for previous discussions, maybe it has already been answered
Reposts are fine, but should have at least a couple of weeks in between so that the post can reach a new audience
Be nice :)

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 7 years ago

MODERATORS