Got an early iPhone or iPad? Update now or turn it into a paperweight

Credit to Author: John E Dunn| Date: Wed, 30 Oct 2019 12:26:25 +0000

Calling Apple iPhone 5, iPhone 4s or early iPad owners – your device may be about to turn into a vintage technology paperweight.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/zgT62q9uedk” height=”1″ width=”1″ alt=””/>

Read more

Gradient “celebrity matching” photo app sparks privacy fears

Credit to Author: Paul Ducklin| Date: Tue, 29 Oct 2019 11:53:02 +0000

The Kardashians love the Gradient app – but they’re being paid to use it, whereas for you it’s the other way round. Is it safe?<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/cKna-7UcJBE” height=”1″ width=”1″ alt=””/>

Read more

Woman ordered to type in iPhone passcode so police can search device

Credit to Author: Lisa Vaas| Date: Tue, 22 Oct 2019 11:41:03 +0000

It’s not a violation of her Fifth Amendment rights, the court said, because it’s a “foregone conclusion” that she knows her phone passcode.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/DdWnZ_mEEBY” height=”1″ width=”1″ alt=””/>

Read more

Why we need Apple’s HomeKit-enabled routers

Credit to Author: Jonny Evans| Date: Wed, 16 Oct 2019 06:47:00 -0700

How secure are the connected smart devices you keep in your home? How much protection have you put in place, and have you even taken a minute to change your default router password?

Computer says no

The truth is many smart home device users (and those running connected devices in smart offices, enterprises, manufacturing and beyond) may not yet have taken stock of their security.

This is a particular problem when it comes to older smart devices, many of which are still in use even though a large number of them shipped with weak or non-replaceable factory default passcodes.

To read this article in full, please click here

Read more

Update now! Windows users targeted by iTunes Software Updater zero-day

Credit to Author: John E Dunn| Date: Tue, 15 Oct 2019 12:06:07 +0000

The flaw is a rare ‘unquoted path class’ described as “so thoroughly documented that you would expect programmers to be well aware…” But that’s not the case.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/PLucYEnVB5k” height=”1″ width=”1″ alt=””/>

Read more

Signal immediately fixed FaceTime-style eavesdropping bug

Credit to Author: Danny Bradbury| Date: Tue, 08 Oct 2019 11:25:17 +0000

Remember the FaceTime bug that allowed a caller to eavesdrop on your phone? Researchers just discovered another – this time in Signal.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/kuYuPSST8YI” height=”1″ width=”1″ alt=””/>

Read more

O.MG! Evil Lightning cable about to hit mass distribution

Credit to Author: Danny Bradbury| Date: Wed, 02 Oct 2019 12:27:19 +0000

This malicious O.MG Lightning cable has come a long way, with extensive work on the kinds of payload it can deliver.<img src=”http://feeds.feedburner.com/~r/nakedsecurity/~4/P7a9UkBNKp0″ height=”1″ width=”1″ alt=””/>

Read more

New iOS exploit checkm8 allows permanent compromise of iPhones

Credit to Author: Thomas Reed| Date: Fri, 27 Sep 2019 16:48:42 +0000

A new exploit for iOS enables attackers to gain permanent access to iPhones, iPads, Apple Watches, and more—with zero potential for patching. Learn why this is possibly the biggest security news for iOS since its inception.

Categories:

Tags:

(Read more…)

The post New iOS exploit checkm8 allows permanent compromise of iPhones appeared first on Malwarebytes Labs.

Read more

Apple just made Safari a better fit for the enterprise

Credit to Author: Jonny Evans| Date: Wed, 25 Sep 2019 07:15:00 -0700

Enterprise users can now wrap a new layer of security around their web services, thanks to Apple’s introduction of support for USB security keys in Safari 13.0.1.

Enterprise class security

Dongles aren’t a terribly convenient security protection for most people, but government, military and regulated industries are always searching out new ways to secure themselves, and their data.

FIDO2-compliant USB security keys – such as those made by Yubico – add a layer of security to the verification process:

To read this article in full, please click here

Read more