Security

Security researchers share PoC for CVE-2025-31200, a security vulnerability patched in iOS 18.4.1

Anthony Bouchard ∙ May 28, 2025

In iOS & iPadOS 18.4.1, Apple patched CVE-2025-31200, which is a CoreAudio security vulnerability patch that could have enabled arbitrary code execution in the userspace process responsible for processing the malicious file. Apple was made aware of instances in which this vulnerability may have been used against specifically targeted individuals and consequently patched it with improved bounds checking.

Apple releases iPadOS 17.7.8 with important security fixes and, presumably, a fix for the app logging issue

Christian Zibreg ∙ May 19, 2025

Apple has released iPadOS 17.7.8 with important security fixes, including one for the app logging issue that plagued some iPad owners after installing iPadOS 17.7.7.

Alfiecg_dev shares details about an updated untethered iOS 14 jailbreak that uses the Trigon exploit

Anthony Bouchard ∙ May 15, 2025

A couple of months ago, talented hobbyist and security researcher @alfiecg_dev shared a write-up on a deterministic kernel exploit called Trigon that was based on CVE-2023-32434 with a 100% success rate, but support was limited to certain older devices running older firmware. Since then, it appears that @alfiecg_dev has been busy…

Security researcher shares PoC for CVE-2023-41992 local privilege escalation bug

Anthony Bouchard ∙ May 14, 2025

When Apple released iOS & iPadOS 16.7 back in 2023, they patched a security vulnerability discovered by Bill Marczak that has since been coined CVE-2023-41992. Apple noted in the online ‘About the security content of iOS 16.7 and iPadOS 16.7’ support document page that this was a kernel vulnerability that may have enabled an attacker to elevate their privileges.

iOS 18.5 patches 30+ security vulnerabilities in Mail, Notes, FaceTime, iCloud document sharing and more

Christian Zibreg ∙ May 12, 2025

Install iOS 18.5 on your iPhone to get patches for more than thirty security vulnerabilities in Notes, FaceTime, Phone, iCloud document sharing and more.

Apple alerts iPhone owners targeted by government-sponsored spyware attacks

Christian Zibreg ∙ April 30, 2025

Apple recently notified iPhone owners around who were targeted by government-sponsored spyware attacks to help increase their security and privacy.

iOS 18.4.1 fixes connection issue with wireless CarPlay

Christian Zibreg ∙ April 17, 2025

Wireless CarPlay in iOS 18.4 was causing an unknown percentage of drivers connection issues, but Apple's iOS 18.4.1 update fixes the problem.

Why and how to turn off Stolen Device Protection on iPhone

Ankur Thakur ∙ April 17, 2025

Learn how to disable the Stolen Device Protection feature on your iPhone to avoid the one-hour wait for Apple Account changes.

How to turn off all passcodes from iPad or iPhone for easy access

Ankur Thakur ∙ April 8, 2025

Learn how to remove all passwords and security checkpoints from your iPad or iPhone, making it easy to unlock and use as a simple tablet or phone.

Technical analysis by Verichains confirms sandbox escape use by certain banking apps to detect TrollStore, jailbreak apps

Anthony Bouchard ∙ March 28, 2025

Just yesterday, we reported on one of TrollStore perma-signing utility developer Lars Fröder’s posts on Bluesky sharing that some banking apps available in Apple’s App Store as of this writing utilize a 0-day sandbox escape technique to find out if certain unfavorable apps or services are installed on the end user’s device.

Ian Beer publishes in-depth analysis of BLASTPASS zero-click iMessage exploit from 2023

Anthony Bouchard ∙ March 27, 2025

In a surprise turn of events, Google Project Zero security researcher Ian Beer took to social media platform 𝕏 (formerly Twitter) this week to share an in-depth write-up on the 0-click NSO BLASTPASS iMessage exploit that had actively been exploited in the wild before being patched by Apple in iOS & iPadOS 16.6.1 on September 7th, 2023.

Are certain banking apps using a 0-day sandbox escape to detect TrollStore?

Anthony Bouchard ∙ March 27, 2025

Apple devices utilize a security technique called sandboxing, which isolates apps’ processes into their own protected environments so they can’t access certain parts of the file system that the manufacturer deems sensitive. But it’s possible for apps to circumvent this security mechanism via what’s known as a sandbox escape.