Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security...

Apple s'est emparé de LegbaCore, un éditeur de logiciel de sécurité IT spécial firmware. Il avait conçu le ver Thunderstrike 2 qui visait les Mac.

Learn more:

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

While Patch Tuesday is a well-known event for Microsoft and Adobe users, Apple product owners this week received a dose of reality when they found themselves on the receiving end of several security updates.

Apple released multiple updates that touch most of its product portfolio and Apple fans can look forward to more of the same as the company's devices are targeted by cybercriminals, according to Symantec blogger and senior information developer Dick O'Brien. While the number of threats is miniscule compared to what Microsoft, Google and Adobe users face, they are increasing.

Learn more / Mehr erfahren / En savoir plus :

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?tag=Patch+Tuesday+made+in+Apple

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

Le non-renouvellement d’un certificat de sécurité par Apple a provoqué une belle pagaille sur Mac App Store. Apple a renouvelé son certificat jusqu’en 2035

En savoir plus / Mehr erfahren / Learn more:

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

A new threat research report conducted by Bit9+ Carbon Black’s research team found that in 2015, there was 948 malware instances. The number of  OS X malware samples this year is five times greater than in 2010-2014 combined — where there was only 180 malware instances over a four-year period. Based on observations in a 10-week analysis: the research team anticipates MAC OS X malware to surge in the coming months.

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

Bad news iOS 9 users. Someone has developed a way of jailbreaking your iPhone or iPad and spying on you, in a way that is currently unstoppable.

This new hack has implications far exceeding the million dollar bounty.

Learn more:

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?tag=ZERODIUM

HACKING APPLE’S IOS isn’t easy. But in the world of cybersecurity, even the hardest target isn’t impossible—only expensive. And the price of a working attack that can compromise the latest iPhone is apparently somewhere around $1 million.

On Monday, the security startup Zerodium announced that it’s agreed to pay out that seven-figure sum to a team of hackers who have successfully developed a technique that can hack any iPhone or iPad that can be tricked into visiting a carefully crafted web site. Zerodium describes that technique as a “jailbreak”—a term used by iPhone owners to hack their own phones to install unauthorized apps. But make no mistake: Zerodium and its founder Chaouki Bekrar have made clear that its customers include governments who no doubt use such “zero-day” hacking techniques on unwitting surveillance targets.

Learn more:

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?tag=ZERODIUM

A malicious advertising SDK was grabbing device serial numbers and Apple ID email addresses.

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?tag=App-Store-Malware

Die Malware läuft auch auf iPhones und iPads ohne Jailbreak und erhält durch Nutzung privater APIs weitreichenden Zugriff, erklärt eine Sicherheitsfirma. Die Infektion erfolge auf verschiedenen Wegen.

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

Virus Bulletin 2015, Prague - Researcher Patrick Wardle says he "loves his Mac, but it's so easy to hack".

At the VB2015 conference in Prague earlier today, Wardle explained to members of the security community how he had uncovered a way to easily waltz past one of the key safeguards that Apple built into its OS X operating system to block unauthorised code, downloaded from the internet, from running.

Generally, Gatekeeper does a reasonable job.

If an app is developed by an unknown developer, or has been tampered with en route to your computer via a man-in-the-middle attack over an unencrypted HTTP connection, then Gatekeeper is supposed to spot it and block it.

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

iPhone users have yet another screenlock bypass vulnerability to watch out for, according to a new video demonstration that shows how the bug can be exploited to gain unauthorized access to photos and contacts.

The hack reportedly works on iOS version 9.0.1, which Apple released Wednesday, although some people say they are unable to reproduce it. The vulnerability makes it possible for someone who gets even a brief moment with an iPhone to rifle through contacts and photos without entering the password. Here it is in action.

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

Cybercriminals are increasingly targeting Apple devices and 2016 will see a rise in attacks on its operating systems, security experts suggest.

According to security firm Symantec, the amount of malware aimed at Apple's mobile operating system (iOS) has more than doubled this year, while threats to Mac computers also rose.

Security firm FireEye also expects 2016 to be a bumper year for Apple malware.

Systems such as Apple Pay could be targeted, it predicts.

Apple is an obvious target for cybercriminals because its products are so popular, said Dick O'Brien, a researcher at Symantec.

While the total number of threats targeting Apple devices remains low compared with Windows and Android, Symantec is seeing the range of threats multiply.

Last year, it was seeing a monthly average of between 10,000 and 70,000 Mac computers infected with malware.

"This is far fewer than Windows desktops and we don't want to scaremonger. Apple remains a relatively safe platform but Apple users can no longer be complacent about security, as the number of infections and new threats rise," said Mr O'Brien.

The number of unique OS X computers infected with malware in the first nine months of 2015 was seven times higher than in all of 2014, its research found.

Learn more:

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

A security glitch last night has caused uproar among Mac users after it forced many to reinstall software downloaded from the Mac App Store. It appears the security certificate Apple uses to prevent piracy expired overnight on Wednesday, causing trouble with Mac users’ apps.

Alex Hern, writing for The Guardian, further explained what happened, saying:

“Applications downloaded from the Mac App Store were temporarily unavailable from 10PM UK time, when a security certificate expired, five years after its creation, with no replacement immediately available.”

The issue was first spotted by a Mac and iOS developer, Paul Haddad,

...

Learn more:

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

“For years, Mac users have watched their PC-using counterparts struggle with cyber-attacks, while enjoying the relative immunity that their hardware provides from malware. This view is becoming increasingly outdated; our research shows that Mac users should be just as worried,” argued Bit9 + Carbon Black Emea MD, David Flower.

“With 45 per cent of businesses now offering Macs as an option to staff, our research should be seen as a timely reminder that every device on the network is a potential target—businesses can’t just rely on a clearly outdated perception of invulnerability.”

Mac malware is set to accelerate over the coming months after having its most prolific year ever so far in 2015, according to new research from endpoint security firm Bit9 + Carbon Black.

After an analysis of the year so far, the vendor concluded that five times more Mac malware appeared in 2015 than the previous five years combined.  

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

The government would love to get its hands on a foolproof way to break into the new highly encrypted iPhone. And it looks like some clever hackers just gave it to them.

Learn more:

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?tag=ZERODIUM

Apple: Prüfprozess überlistet

Die Analysefirma SourceDNA hat nach eigenen Angaben Hunderte Apps gefunden, die unerlaubterweise persönliche Daten von Nutzern gesammelt und weitergegeben haben sollen. Den Experten zufolge sei das das erste Mal, dass iOS-Apps trotz dieser Funktionen erfolgreich Apples Prüfprozess für den Zugang zum App Store überlistet hätten – und dabei entdeckt wurden. Die 256 identifizierten Apps sollen insgesamt rund eine Million Mal heruntergeladen worden sein.

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?tag=App-Store-Malware

Mit einer vergleichsweise simplen Methode hat ein Sicherheitsforscher OS X unsignierten Code untergeschoben und anschließend ausgeführt.

Der leitende Sicherheitsforscher der Unternehmensberater Synack Patrick Wardle hat den Sicherheitsmechanismus Gatekeeper von Apples Betriebssystem OS X umgangen und nicht signierten Code ausgeführt. Welche OS-X-Versionen davon betroffen sind, ist derzeit nicht bekannt. Einem Apple-Sprecher zufolge arbeitet das Unternehmen an einem Patch, schreibt das Technik-Portal Arstechnica .

Learn more / En savoir plus / Mehr erfahren:

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security