Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security...
18.2K views | +10 today
Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security...
Everything related to the (in)security of Apple products
Curated by Gust MEES
Your new post is loading...
Your new post is loading...
Scooped by Gust MEES
September 30, 2017 2:26 PM
Scoop.it!

Irre, so viel verraten iPhone-Fotos: Tool zeigt, was Apple alles über Sie weiß | #Apple #Privacy #ePrivacy 

Irre, so viel verraten iPhone-Fotos: Tool zeigt, was Apple alles über Sie weiß | #Apple #Privacy #ePrivacy  | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Mit der kostenlosen iOS-App DetectLocations können Sie die Meta-Daten Ihrer iPhone-Fotos abrufen und anzeigen lassen. Das Tool zeigt Ihnen alle Informationen die mit dem Foto verknüpft sind und welche auch von anderen Apps extrahiert werden können - so entsteht ein klares Bild Ihrer Urlaubs- und Alltagsroutinen.

 

Mit der Anwendung können Sie nicht nur sehen, wo Sie bereits waren, auch die Informationen aus Urlaubsfotos von Freunden und Familien können ausgelesen werden. So könnten Sie mit Leichtigkeit an die genaue Reise-Route Ihrer Bekannten herankommen und diese ausspionieren.
 
Klar ist, dass das nicht jeder möchte. Zum Glück gibt es Wege, die Bildinformationen aus den Aufnahmen zu entfernen beziehungsweise Apps daran hindern, auf diese zuzugreifen.
 
Gust MEES's insight:
Mit der kostenlosen iOS-App DetectLocations können Sie die Meta-Daten Ihrer iPhone-Fotos abrufen und anzeigen lassen. Das Tool zeigt Ihnen alle Informationen die mit dem Foto verknüpft sind und welche auch von anderen Apps extrahiert werden können - so entsteht ein klares Bild Ihrer Urlaubs- und Alltagsroutinen.

 

Mit der Anwendung können Sie nicht nur sehen, wo Sie bereits waren, auch die Informationen aus Urlaubsfotos von Freunden und Familien können ausgelesen werden. So könnten Sie mit Leichtigkeit an die genaue Reise-Route Ihrer Bekannten herankommen und diese ausspionieren.
 
Klar ist, dass das nicht jeder möchte. Zum Glück gibt es Wege, die Bildinformationen aus den Aufnahmen zu entfernen beziehungsweise Apps daran hindern, auf diese zuzugreifen.
 
No comment yet.
Scooped by Gust MEES
September 29, 2017 3:34 PM
Scoop.it!

New study finds small percentage of Macs are running insecure firmware | #Apple #CyberSecurity #Updates 

New study finds small percentage of Macs are running insecure firmware | #Apple #CyberSecurity #Updates  | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
If you own a Mac and haven't upgraded to the new High Sierra OS, your system could be vulnerable to threats like Thunderstrike, a malware attack that enters through your computer's Thunderbolt port.

Researchers from Duo Security published a white paper today explaining the potential issues, which was first noticed by 9to5Mac. The firm analyzed 73,324 Mac computers and found that, on average, 4.2 percent of them weren't running the proper firmware, leaving the systems vulnerable to cyber attacks. Luckily for consumers, the vulnerabilities aren't thought to be as risky for home users according to a Duo blog post summarizing the paper — but you should still be sure you're running the right firmware. 

Although Apple has released security updates to protect against Thunderstrike attacks, the researchers found that, for some reason, the critical updates weren't always applied.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

Gust MEES's insight:
If you own a Mac and haven't upgraded to the new High Sierra OS, your system could be vulnerable to threats like Thunderstrike, a malware attack that enters through your computer's Thunderbolt port.

Researchers from Duo Security published a white paper today explaining the potential issues, which was first noticed by 9to5Mac. The firm analyzed 73,324 Mac computers and found that, on average, 4.2 percent of them weren't running the proper firmware, leaving the systems vulnerable to cyber attacks. Luckily for consumers, the vulnerabilities aren't thought to be as risky for home users according to a Duo blog post summarizing the paper — but you should still be sure you're running the right firmware. 

Although Apple has released security updates to protect against Thunderstrike attacks, the researchers found that, for some reason, the critical updates weren't always applied.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

No comment yet.
Scooped by Gust MEES
September 28, 2017 4:54 AM
Scoop.it!

[Infographic] More Mac malware than ever before | #Apple #CyberSecurity #Awareness

[Infographic] More Mac malware than ever before | #Apple #CyberSecurity #Awareness | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Mac malware is on the rise, shows the analysis of Mac attacks by F-Secure Labs. Most are spyware, but also targeted attacks and ransomware.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

Gust MEES's insight:
Mac malware is on the rise, shows the analysis of Mac attacks by F-Secure Labs. Most are spyware, but also targeted attacks and ransomware.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

No comment yet.
Scooped by Gust MEES
September 27, 2017 4:03 PM
Scoop.it!

Apple: Just squeeze the iPhone X if you're forced into a Face ID unlock | #Privacy 

Apple: Just squeeze the iPhone X if you're forced into a Face ID unlock | #Privacy  | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Apple has given the iPhone X an emergency feature that users can trigger if they're forced by a thief or police to look at the device and unlock it.

Apple says Face ID is even better than Touch ID at thwarting biometric spoofing thanks to the hardware setup.

But just as someone else can force you to put a finger on the home button, they can also force you to look at the phone. So developer Keith Krimbel asked an Apple's senior vice president of software engineer, Craig Federighi, what happens if a thief steals your phone and then points it at your face before taking off?

He posted Federighi's response on Twitter. The iPhone X has you covered with two key mitigations, according to Federighi.

First, it won't unlock unless you stare at the iPhone. Also, if you still have possession of the phone and are asked to give it up, you can grip the buttons on both sides of the phone before you hand it over, which will temporarily disable Face ID.

iOS 11 also introduces a shortcut to disable Touch ID in emergency situations, but it requires five presses on the sleep button.

 

Is Face ID more secure than a passcode? It depends who you ask.

If it's a jealous partner who wants to rummage through your text messages, then it's fairly secure. But if it's a government wanting to know who you communicate with, then you're likely tough out of luck.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=Privacy

 

Gust MEES's insight:
Apple has given the iPhone X an emergency feature that users can trigger if they're forced by a thief or police to look at the device and unlock it.

Apple says Face ID is even better than Touch ID at thwarting biometric spoofing thanks to the hardware setup.

But just as someone else can force you to put a finger on the home button, they can also force you to look at the phone. So developer Keith Krimbel asked an Apple's senior vice president of software engineer, Craig Federighi, what happens if a thief steals your phone and then points it at your face before taking off?

He posted Federighi's response on Twitter. The iPhone X has you covered with two key mitigations, according to Federighi.

First, it won't unlock unless you stare at the iPhone. Also, if you still have possession of the phone and are asked to give it up, you can grip the buttons on both sides of the phone before you hand it over, which will temporarily disable Face ID.

iOS 11 also introduces a shortcut to disable Touch ID in emergency situations, but it requires five presses on the sleep button.

 

Is Face ID more secure than a passcode? It depends who you ask.

If it's a jealous partner who wants to rummage through your text messages, then it's fairly secure. But if it's a government wanting to know who you communicate with, then you're likely tough out of luck.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=Privacy

 

No comment yet.
Scooped by Gust MEES
September 26, 2017 12:16 PM
Scoop.it!

MacOS High Sierra: MacOS-Keychain kann per App ausgelesen werden | #Apple #CyberSecurity #NobodyIsPerfect 

MacOS High Sierra: MacOS-Keychain kann per App ausgelesen werden | #Apple #CyberSecurity #NobodyIsPerfect  | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
MacOS-Keychain kann per App ausgelesen werden
Der Sicherheitsforscher Patrick Wardle hat demonstriert, dass Apples Keychain unter MacOS mit einer App komplett ausgelesen werden kann. Diese muss aber zunächst an Apples Gatekeeper vorbei.


Der Hacker Patrick Wardle hat nach eigenen Angaben eine Sicherheitslücke in der aktuellen Version von Apples Desktop-Betriebssystem High Sierra gefunden, die es bösartigen Applikationen ermöglicht, Passwörter aus Apples Keychain auszulesen. Normalerweise müssen Nutzer einzelne Passwörter durch Eingabe eines Master-Passworts freigeben.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=MacOS

 

Gust MEES's insight:
MacOS-Keychain kann per App ausgelesen werden
Der Sicherheitsforscher Patrick Wardle hat demonstriert, dass Apples Keychain unter MacOS mit einer App komplett ausgelesen werden kann. Diese muss aber zunächst an Apples Gatekeeper vorbei.


Der Hacker Patrick Wardle hat nach eigenen Angaben eine Sicherheitslücke in der aktuellen Version von Apples Desktop-Betriebssystem High Sierra gefunden, die es bösartigen Applikationen ermöglicht, Passwörter aus Apples Keychain auszulesen. Normalerweise müssen Nutzer einzelne Passwörter durch Eingabe eines Master-Passworts freigeben.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=MacOS

 

No comment yet.
Scooped by Gust MEES
September 25, 2017 5:22 PM
Scoop.it!

High Sierra Reportedly Has a Password Problem | #Apple #CyberSecurity #macOS #NobodyIsPerfect 

High Sierra Reportedly Has a Password Problem | #Apple #CyberSecurity #macOS #NobodyIsPerfect  | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Apple’s latest macOS, High Sierra, rolls out today with plenty of nice security upgrades, including invasive ad tracker blocking in Safari and weekly firmware validation. But the new OS apparently comes with a security problem, too—a security researcher at Synack has already discovered a way to snatch passwords from High Sierra.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

Gust MEES's insight:
Apple’s latest macOS, High Sierra, rolls out today with plenty of nice security upgrades, including invasive ad tracker blocking in Safari and weekly firmware validation. But the new OS apparently comes with a security problem, too—a security researcher at Synack has already discovered a way to snatch passwords from High Sierra.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

No comment yet.
Scooped by Gust MEES
September 21, 2017 3:27 PM
Scoop.it!

Turning Off Wifi, Bluetooth in iOS 11 Not as Easy as It Seems | #Apple #Privacy 

Turning Off Wifi, Bluetooth in iOS 11 Not as Easy as It Seems | #Apple #Privacy  | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it

If you're an iPhone user who's downloaded iOS 11, you'll want to pay attention to this recent Tweet from F-Secure's head of hardware security Andrea Barisani.

 

iOS 11 comes with a new Control Center that opens when you swipe up from the bottom of the screen. But ironically, the app seems to be lacking some control. When you tap the Bluetooth and Wifi icons, while the phone disconnects from any current Bluetooth or Wifi connections, it doesn’t turn off those features completely.

 

That means new Bluetooth or Wifi connections can still be made. In order to make sure those features are off completely, you’ll need to go into the separate Settings app and turn them off there.

From a security and privacy perspective, it’s important to understand this distinction because turning off Bluetooth and Wifi when you’re not using them prevents your device from broadcasting information about itself.

 

Learn more / En savoir plus / Mehr erfahren: 

 

https://gustmees.wordpress.com/2013/12/21/privacy-in-the-digital-world-shouldnt-we-talk-about-it/

 

https://gustmees.wordpress.com/?s=privacy

 

 

Gust MEES's insight:

If you're an iPhone user who's downloaded iOS 11, you'll want to pay attention to this recent Tweet from F-Secure's head of hardware security Andrea Barisani.

 

iOS 11 comes with a new Control Center that opens when you swipe up from the bottom of the screen. But ironically, the app seems to be lacking some control. When you tap the Bluetooth and Wifi icons, while the phone disconnects from any current Bluetooth or Wifi connections, it doesn’t turn off those features completely.

 

That means new Bluetooth or Wifi connections can still be made. In order to make sure those features are off completely, you’ll need to go into the separate Settings app and turn them off there.

From a security and privacy perspective, it’s important to understand this distinction because turning off Bluetooth and Wifi when you’re not using them prevents your device from broadcasting information about itself.

 

Learn more / En savoir plus / Mehr erfahren: 

 

https://gustmees.wordpress.com/2013/12/21/privacy-in-the-digital-world-shouldnt-we-talk-about-it/

 

https://gustmees.wordpress.com/?s=privacy

 

 

No comment yet.
Scooped by Gust MEES
August 31, 2017 4:27 PM
Scoop.it!

Mac malware is spreading at a frightening rate, claims report | #CyberSecurity #Awareness #NobodyIsPerfect

Mac malware is spreading at a frightening rate, claims report | #CyberSecurity #Awareness #NobodyIsPerfect | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Macs are becoming an increasingly big target for malware authors, and a new report has pointed to a massive increase this year in the likes of viruses aimed at Apple’s machines (which were once regarded as relative safe havens in comparison to Windows PCs).

The findings from Malwarebytes show that as of July 2017, there has been a huge leap of 230% in Mac malware compared to the previous year.

Some categories of malicious software are increasing at an even faster rate than this, namely adware and potentially unwanted programs (PUPs) according to the security firm, although it didn’t clarify any percentage rates in these cases.

Malwarebytes also observed that the Mac App Store is currently awash with a ‘tidal wave’ of scam software.

As Betanews reports, the authors of the study looked to the future, predicting that: “In 2018, Mac malware will increase but PUPs will see the largest growth. These are not very well policed and are free to proliferate unchecked.

“Mac users are already experiencing some of this now, with an explosion of fake anti-virus apps in the Mac App Store. These are not well controlled by Apple and not commonly known of even within the security community.”

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

Gust MEES's insight:
Macs are becoming an increasingly big target for malware authors, and a new report has pointed to a massive increase this year in the likes of viruses aimed at Apple’s machines (which were once regarded as relative safe havens in comparison to Windows PCs).

The findings from Malwarebytes show that as of July 2017, there has been a huge leap of 230% in Mac malware compared to the previous year.

Some categories of malicious software are increasing at an even faster rate than this, namely adware and potentially unwanted programs (PUPs) according to the security firm, although it didn’t clarify any percentage rates in these cases.

Malwarebytes also observed that the Mac App Store is currently awash with a ‘tidal wave’ of scam software.

As Betanews reports, the authors of the study looked to the future, predicting that: “In 2018, Mac malware will increase but PUPs will see the largest growth. These are not very well policed and are free to proliferate unchecked.

“Mac users are already experiencing some of this now, with an explosion of fake anti-virus apps in the Mac App Store. These are not well controlled by Apple and not commonly known of even within the security community.”

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

No comment yet.
Scooped by Gust MEES
July 25, 2017 10:59 AM
Scoop.it!

Mac-Malware Fruitfly kann Maus und Tastatur bedienen sowie Webcam einschalten | #Apple #CyberSecurity 

Mac-Malware Fruitfly kann Maus und Tastatur bedienen sowie Webcam einschalten | #Apple #CyberSecurity  | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it

Fruitfly blieb wahrscheinlich mehrere Jahre unentdeckt. Die neue Variante der Malware erlaubt es Angreifern, aus der Ferne die vollständige Kontrolle zu übernehmen...

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=Fruitfly

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

Gust MEES's insight:

Fruitfly blieb wahrscheinlich mehrere Jahre unentdeckt. Die neue Variante der Malware erlaubt es Angreifern, aus der Ferne die vollständige Kontrolle zu übernehmen...

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=Fruitfly

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

No comment yet.
Scooped by Gust MEES
July 19, 2017 10:33 AM
Scoop.it!

Apple-ID: Polizei warnt vor neuer Phishing-Welle | #Apple #CyberSecurity #Awareness

Apple-ID: Polizei warnt vor neuer Phishing-Welle | #Apple #CyberSecurity #Awareness | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Mit gefälschten E-Mails und Webseiten wollen Kriminelle Zugangsdaten von Apple-Nutzern erschleichen. Die Phishing-Seiten setzen auf "gute Optik" und geben sich durch https-Verschlüsselung einen seriösen Anschein, warnt die Polizei Niedersachsen.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

Gust MEES's insight:
Mit gefälschten E-Mails und Webseiten wollen Kriminelle Zugangsdaten von Apple-Nutzern erschleichen. Die Phishing-Seiten setzen auf "gute Optik" und geben sich durch https-Verschlüsselung einen seriösen Anschein, warnt die Polizei Niedersachsen.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

No comment yet.
Scooped by Gust MEES
June 13, 2017 4:35 PM
Scoop.it!

MacOS a aussi son ransomware-as-a-service | #Apple #CyberSecurity 

MacOS a aussi son ransomware-as-a-service | #Apple #CyberSecurity  | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Sécurité : Fortinet publie l’analyse d’un ransomware destiné à viser les utilisateurs de macOS. Mais si celui-ci se distingue par un fonctionnement de type as-a-service, il ne présente pas la même sophistication que ses semblables.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

Gust MEES's insight:
Sécurité : Fortinet publie l’analyse d’un ransomware destiné à viser les utilisateurs de macOS. Mais si celui-ci se distingue par un fonctionnement de type as-a-service, il ne présente pas la même sophistication que ses semblables.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

No comment yet.
Scooped by Gust MEES
May 25, 2017 7:29 AM
Scoop.it!

Die 7 gefährlichsten Computer-Programme | #CyberSecurity #OS #BSI

Die 7 gefährlichsten Computer-Programme | #CyberSecurity #OS #BSI | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Finger weg von dieser Software: Viele Programme sind ganz schön gefährlich, weil sie drastische Sicherheitslücken aufweisen. Das Bundesamt für Sicherheit in der Informationstechnik warnt jedes Jahr vor aktueller Software mit großen Schwachstellen. Wir zeigen, welche Programme davon betroffen sind.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

http://www.scoop.it/t/securite-pc-et-internet/

 

Gust MEES's insight:
Finger weg von dieser Software: Viele Programme sind ganz schön gefährlich, weil sie drastische Sicherheitslücken aufweisen. Das Bundesamt für Sicherheit in der Informationstechnik warnt jedes Jahr vor aktueller Software mit großen Schwachstellen. Wir zeigen, welche Programme davon betroffen sind.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

http://www.scoop.it/t/securite-pc-et-internet/

 

No comment yet.
Scooped by Gust MEES
May 17, 2017 9:52 AM
Scoop.it!

Apple fixes dozens of security bugs for iPhones, Macs | #CyberSecurity #Updates

Apple fixes dozens of security bugs for iPhones, Macs | #CyberSecurity #Updates | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Apple has squashed dozens of security bugs in its latest releases of its iPhone, iPad, and Mac operating systems.

The Cupertino, Calif.-based company rolled out 23 security fixes in iOS 10.3.2 and another 30 fixes in macOS 10.12.5, both of which were released on Monday.

Among the bugs, two bugs in iBooks for iOS could allow an attacker to arbitrarily open websites and execute malicious code at the kernel level. Over a dozen flaws were found in WebKit, which renders websites and pages on iPhones and iPads, that could allow several kinds of cross-site scripting (XSS) attacks.

A separate flaw in iBooks for macOS desktops and notebooks could allow an application to escape its secure sandbox, a technology used to prevent data loss or theft in the case of an app compromise.

Almost half of the bugs found were attributed to Google's Project Zero, the search giant's in-house vulnerability-finding and security team.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=Updates

 

http://www.scoop.it/t/securite-pc-et-internet/?&tag=Updates

 

 

 

Gust MEES's insight:
Apple has squashed dozens of security bugs in its latest releases of its iPhone, iPad, and Mac operating systems.

The Cupertino, Calif.-based company rolled out 23 security fixes in iOS 10.3.2 and another 30 fixes in macOS 10.12.5, both of which were released on Monday.

Among the bugs, two bugs in iBooks for iOS could allow an attacker to arbitrarily open websites and execute malicious code at the kernel level. Over a dozen flaws were found in WebKit, which renders websites and pages on iPhones and iPads, that could allow several kinds of cross-site scripting (XSS) attacks.

A separate flaw in iBooks for macOS desktops and notebooks could allow an application to escape its secure sandbox, a technology used to prevent data loss or theft in the case of an app compromise.

Almost half of the bugs found were attributed to Google's Project Zero, the search giant's in-house vulnerability-finding and security team.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=Updates

 

http://www.scoop.it/t/securite-pc-et-internet/?&tag=Updates

 

No comment yet.
Scooped by Gust MEES
September 30, 2017 7:01 AM
Scoop.it!

Des failles EFI pour près de 5% des Mac | #Apple #CyberSecurity

Des failles EFI pour près de 5% des Mac | #Apple #CyberSecurity | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it

Apple a mal à son EFI. Duo Security a mené une analyse au longs cours concernant l’Extensible Firmware Interface — le programme de démarrage — de 73 000 Mac et surprise, même si des mises à jour de macOS y sont régulièrement appliquées, un certain nombre d’entre eux restent vulnérables à des attaques. La faute à des EFI qui ne sont pas à jour malgré l’application d’une version toute neuve du système d’exploitation.

Dans l’étude, c’est le cas pour 4,2% des machines : 47 des Mac analysés sont susceptibles d’être infectés via la faille Thunderstrike datant de 2014, 31 autres ordinateurs sont vulnérables à la faille Thunderstrike 2 et au “tournevis sonique” mis au point par la CIA (des attaques qui nécessitent toutefois un accès physique aux ordinateurs). Plus inquiétant, 43% des iMac 21,5 pouces lancés fin 2015 se montrent sensibles à ces failles.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

Gust MEES's insight:

Apple a mal à son EFI. Duo Security a mené une analyse au longs cours concernant l’Extensible Firmware Interface — le programme de démarrage — de 73 000 Mac et surprise, même si des mises à jour de macOS y sont régulièrement appliquées, un certain nombre d’entre eux restent vulnérables à des attaques. La faute à des EFI qui ne sont pas à jour malgré l’application d’une version toute neuve du système d’exploitation.

Dans l’étude, c’est le cas pour 4,2% des machines : 47 des Mac analysés sont susceptibles d’être infectés via la faille Thunderstrike datant de 2014, 31 autres ordinateurs sont vulnérables à la faille Thunderstrike 2 et au “tournevis sonique” mis au point par la CIA (des attaques qui nécessitent toutefois un accès physique aux ordinateurs). Plus inquiétant, 43% des iMac 21,5 pouces lancés fin 2015 se montrent sensibles à ces failles.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

No comment yet.
Scooped by Gust MEES
September 28, 2017 8:52 AM
Scoop.it!

iOS 11.0.1: Update behebt Probleme und bringt Verbesserungen | #Apple #CyberSecurity #Updates #NobodyIsPerfect

iOS 11.0.1: Update behebt Probleme und bringt Verbesserungen | #Apple #CyberSecurity #Updates #NobodyIsPerfect | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Apple liefert mit iOS 11.0.1 das erste Update seines neuen mobilen Betriebssystems aus. Es behebt Probleme und bringt Verbesserungen mit sich.

 

Apple hat das neue mobile Betriebssystem iOS 11 gerade einmal vor einer Woche offiziell in Umlauf gebracht. Nun schiebt das Unternehmen mit iOS 11.0.1 bereits ein Update hinterher. Es soll Probleme beheben und für Verbesserungen in der Bedienung sorgen. Die Update-Datei hat eine Größe zwischen 280 MB und 290 MB, je nach iPhone-Modell.

 

Mit der Version 11.0.1 werden anscheinend auch Sicherheitslücken geschlossen, da sie auf der Support-Seite von Apple als Sicherheits-Update gelistet ist. Welche Schwachstellen geschlossen worden sind, ist nicht bekannt. Apple hat diesbezüglich noch keine Informationen veröffentlicht.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

Gust MEES's insight:
Apple liefert mit iOS 11.0.1 das erste Update seines neuen mobilen Betriebssystems aus. Es behebt Probleme und bringt Verbesserungen mit sich.

 

Apple hat das neue mobile Betriebssystem iOS 11 gerade einmal vor einer Woche offiziell in Umlauf gebracht. Nun schiebt das Unternehmen mit iOS 11.0.1 bereits ein Update hinterher. Es soll Probleme beheben und für Verbesserungen in der Bedienung sorgen. Die Update-Datei hat eine Größe zwischen 280 MB und 290 MB, je nach iPhone-Modell.

 

Mit der Version 11.0.1 werden anscheinend auch Sicherheitslücken geschlossen, da sie auf der Support-Seite von Apple als Sicherheits-Update gelistet ist. Welche Schwachstellen geschlossen worden sind, ist nicht bekannt. Apple hat diesbezüglich noch keine Informationen veröffentlicht.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

No comment yet.
Scooped by Gust MEES
September 27, 2017 4:12 PM
Scoop.it!

I'll never use Apple's Face ID | #Privacy

I'll never use Apple's Face ID | #Privacy | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
“People were handling the device for the stage demo ahead of time and didn’t realize Face ID was trying to authenticate their face," the rep told Yahoo. "After failing a number of times, because they weren’t Craig [Federighi], the iPhone did what it was designed to do, which was to require his passcode." 

Theres's a few things to unpack in that statement. The spokesperson is copping to the fact that the iPhone X frequently scans faces in search of a match. This semi "always on" nature of Face ID is a huge red flag for privacy experts. What's more, if even Apple employees can't figure out how to handle the phone without locking out their boss on the company's biggest day of the year then clearly there's a usability issue.

This, combined with the security and privacy one must forfeit in order to use the technology, is more than enough to turn me off to the supposed revolution that Face ID represents. A password, at its core, is supposed to protect your data from a wide range of threats while still being practical. The latest offering from Apple just doesn't cut it.  

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=Privacy

 

Gust MEES's insight:
People were handling the device for the stage demo ahead of time and didn’t realize Face ID was trying to authenticate their face," the rep told Yahoo. "After failing a number of times, because they weren’t Craig [Federighi], the iPhone did what it was designed to do, which was to require his passcode." 

Theres's a few things to unpack in that statement. The spokesperson is copping to the fact that the iPhone X frequently scans faces in search of a match. This semi "always on" nature of Face ID is a huge red flag for privacy experts. What's more, if even Apple employees can't figure out how to handle the phone without locking out their boss on the company's biggest day of the year then clearly there's a usability issue.

This, combined with the security and privacy one must forfeit in order to use the technology, is more than enough to turn me off to the supposed revolution that Face ID represents. A password, at its core, is supposed to protect your data from a wide range of threats while still being practical. The latest offering from Apple just doesn't cut it.  

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=Privacy

 

No comment yet.
Scooped by Gust MEES
September 27, 2017 3:52 PM
Scoop.it!

No, Apple's Face ID Is Not A 'Secure Password' | #Apple #Privacy #NobodyIsPerfect

No, Apple's Face ID Is Not A 'Secure Password' | #Apple #Privacy #NobodyIsPerfect | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Could you prevent someone stealing your iPhone X? According to Apple's software engineering chief Craig Federighi, there are two mitigation options: don't stare at the phone (Face ID is 'attention aware' so only unlocks after eye contact) or grip to press buttons on both sides of the device to temporarily deactivate face recognition.

Both require an optimistic -- even unrealistic -- response to being confronted by a criminal or cop, a scary situation where your adrenaline is pumping and you might not have the presence of mind to remember to disable Face ID. And is it worth risking your life if a mugger with a knife or gun orders you to unlock your phone?

As Schiller correctly stated, "There's no perfect system, not even biometric ones." That still doesn't answer the question of whether biometrics are more secure though.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=Privacy

 

Gust MEES's insight:
Could you prevent someone stealing your iPhone X? According to Apple's software engineering chief Craig Federighi, there are two mitigation options: don't stare at the phone (Face ID is 'attention aware' so only unlocks after eye contact) or grip to press buttons on both sides of the device to temporarily deactivate face recognition.

Both require an optimistic -- even unrealistic -- response to being confronted by a criminal or cop, a scary situation where your adrenaline is pumping and you might not have the presence of mind to remember to disable Face ID. And is it worth risking your life if a mugger with a knife or gun orders you to unlock your phone?

As Schiller correctly stated, "There's no perfect system, not even biometric ones." That still doesn't answer the question of whether biometrics are more secure though.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=Privacy

 

No comment yet.
Scooped by Gust MEES
September 25, 2017 6:05 PM
Scoop.it!

Apple's macOS High Sierra will launch with a major security hole | #Apple #CyberSecurity #NobodyIsPerfect

Apple's macOS High Sierra will launch with a major security hole | #Apple #CyberSecurity #NobodyIsPerfect | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Just hours before Apple is expected to roll out the new version of its desktop and notebook operating system, macOS High Sierra, a security researcher dropped a zero-day.

Patrick Wardle, a former NSA hacker who now serves as chief security researcher at ‎Synack, posted a video of the hack -- a password exfiltration exploit -- in action.

Passwords are stored in the Mac's Keychain, which typically requires a master login password to access the vault.

But Wardle has shown that the vulnerability allows an attacker to grab and steal every password in plain-text using an unsigned app downloaded from the internet, without needing that password.

Wardle tested the exploit on High Sierra, but said that older versions of macOS and OS X are also vulnerable.

He tweeted a short video demonstrating the hack.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=MacOS

 

Gust MEES's insight:
Just hours before Apple is expected to roll out the new version of its desktop and notebook operating system, macOS High Sierra, a security researcher dropped a zero-day.

Patrick Wardle, a former NSA hacker who now serves as chief security researcher at ‎Synack, posted a video of the hack -- a password exfiltration exploit -- in action.

Passwords are stored in the Mac's Keychain, which typically requires a master login password to access the vault.

But Wardle has shown that the vulnerability allows an attacker to grab and steal every password in plain-text using an unsigned app downloaded from the internet, without needing that password.

Wardle tested the exploit on High Sierra, but said that older versions of macOS and OS X are also vulnerable.

He tweeted a short video demonstrating the hack.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=MacOS

 

No comment yet.
Scooped by Gust MEES
September 23, 2017 9:00 AM
Scoop.it!

Some Mac users are getting hit with ransomware -- here's what to do | #CyberSecurity #Apple 

Some Mac users are getting hit with ransomware -- here's what to do | #CyberSecurity #Apple  | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Several Mac users are complaining about getting locked out of their computers for a bitcoin ransom.

 

Learn more / En savoir plus / Mehr erfahren:

 

 http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=RANSOMWARE

 

Gust MEES's insight:
Several Mac users are complaining about getting locked out of their computers for a bitcoin ransom.

 

Learn more / En savoir plus / Mehr erfahren:

 

 http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=RANSOMWARE

 

No comment yet.
Scooped by Gust MEES
September 21, 2017 1:25 PM
Scoop.it!

iOS 11 : coupés via le centre de contrôle, Wi-Fi et Bluetooth restent actifs | #Apple #Privacy #Tracking

iOS 11 : coupés via le centre de contrôle, Wi-Fi et Bluetooth restent actifs | #Apple #Privacy #Tracking | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it

Apple confirme bien ce comportement qu'il n'associe pas à un bug. L'iPhone a en fait régulièrement besoin d'utiliser ce type de...

 

Learn more / En savoir plus / Mehr erfahren:

 

 

https://gustmees.wordpress.com/2013/12/21/privacy-in-the-digital-world-shouldnt-we-talk-about-it/

 

https://gustmees.wordpress.com/?s=privacy

 

Gust MEES's insight:

Apple confirme bien ce comportement qu'il n'associe pas à un bug. L'iPhone a en fait régulièrement besoin d'utiliser ce type de...

 

Learn more / En savoir plus / Mehr erfahren:

 

 

https://gustmees.wordpress.com/2013/12/21/privacy-in-the-digital-world-shouldnt-we-talk-about-it/

 

https://gustmees.wordpress.com/?s=privacy

 

No comment yet.
Scooped by Gust MEES
July 25, 2017 11:42 AM
Scoop.it!

Creepy spyware has infected Macs for years, and we're only just realizing it now | #Apple #CyberSecurity

Creepy spyware has infected Macs for years, and we're only just realizing it now | #Apple #CyberSecurity | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
A researcher discovered malware dubbed Fruitfly that he thinks was designed for "probably perverse reasons."

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=Fruitfly

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

Gust MEES's insight:
A researcher discovered malware dubbed Fruitfly that he thinks was designed for "probably perverse reasons."

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=Fruitfly

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

No comment yet.
Scooped by Gust MEES
July 25, 2017 7:36 AM
Scoop.it!

Fruit Fly 2: Mysteriöse Mac-Malware seit Jahren aktiv | #Apple #CyberSecurity

Fruit Fly 2: Mysteriöse Mac-Malware seit Jahren aktiv | #Apple #CyberSecurity | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Auch Mac-Nutzer sind nicht vor Schadsoftware sicher: Eine Malware soll seit mehr als fünf Jahren aktiv sein, aber nur einige hundert Nutzer befallen haben. Die Software ermöglicht einen weitgehenden Zugriff auf den Rechner und private Informationen.
Mehrere hundert Mac-Nutzer in den USA und Kanda sind offenbar mit einer bislang unbekannten Malware infiziert worden. Diese soll bereits seit mehr als fünf Jahren aktiv sein, wie Motherboard berichtet.

 

Die Malware sammelt nach Angaben des Sicherheitsforscher Patrick Wardle Informationen wie Tastatureingaben und sendet diese an verschiedene Command-und-Control-Server. Über den Infektionsweg ist bislang nichts bekannt. Details zur Malware will Wardle auf den Sicherheitskonferenzen Black Hat und Defcon bekanntgeben.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=Fruitfly

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

Gust MEES's insight:
Auch Mac-Nutzer sind nicht vor Schadsoftware sicher: Eine Malware soll seit mehr als fünf Jahren aktiv sein, aber nur einige hundert Nutzer befallen haben. Die Software ermöglicht einen weitgehenden Zugriff auf den Rechner und private Informationen.
Mehrere hundert Mac-Nutzer in den USA und Kanda sind offenbar mit einer bislang unbekannten Malware infiziert worden. Diese soll bereits seit mehr als fünf Jahren aktiv sein, wie Motherboard berichtet.

 

Die Malware sammelt nach Angaben des Sicherheitsforscher Patrick Wardle Informationen wie Tastatureingaben und sendet diese an verschiedene Command-und-Control-Server. Über den Infektionsweg ist bislang nichts bekannt. Details zur Malware will Wardle auf den Sicherheitskonferenzen Black Hat und Defcon bekanntgeben.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=Fruitfly

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

No comment yet.
Scooped by Gust MEES
June 25, 2017 5:00 PM
Scoop.it!

Mac users face increased ransomware threats | #Apple #CyberSecurity #NobodyIsPerfect #Awareness

Mac users face increased ransomware threats | #Apple #CyberSecurity #NobodyIsPerfect #Awareness | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Apple Inc. has a reputation for building secure devices, but don’t become too complacent because ransomware threats to Mac users are on the rise.

While ransomware attacks against Microsoft Windows-based computers and servers remain far more prevalent, security researchers have detected new Mac threats in recent years and expect to see new threats in the future.

 

Protect your Mac from ransomware
Mac users are clearly not free from the threat of ransomware. While not at epidemic proportions, ransomware attacks against Macs have seen widespread success by breaking into systems that were assumed secure. Fortunately, users today have access to a variety of backup options. You can add an extra layer of protection to your Mac computer by stepping beyond the Apple ecosystem of TimeMachine nearline backups and iCloud synchronization and embracing a third-party cloud backup solution.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=RANSOMWARE

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

Gust MEES's insight:
Apple Inc. has a reputation for building secure devices, but don’t become too complacent because ransomware threats to Mac users are on the rise.

While ransomware attacks against Microsoft Windows-based computers and servers remain far more prevalent, security researchers have detected new Mac threats in recent years and expect to see new threats in the future.

 

Protect your Mac from ransomware
Mac users are clearly not free from the threat of ransomware. While not at epidemic proportions, ransomware attacks against Macs have seen widespread success by breaking into systems that were assumed secure. Fortunately, users today have access to a variety of backup options. You can add an extra layer of protection to your Mac computer by stepping beyond the Apple ecosystem of TimeMachine nearline backups and iCloud synchronization and embracing a third-party cloud backup solution.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security/?&tag=RANSOMWARE

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

No comment yet.
Scooped by Gust MEES
June 12, 2017 10:47 AM
Scoop.it!

Mac users beware! Hackers are selling 'the most sophisticated' Mac malware ever | #MacSpy #CyberSecurity

Mac users beware! Hackers are selling 'the most sophisticated' Mac malware ever | #MacSpy #CyberSecurity | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it

Just because you’re using a Mac doesn’t mean you’ve escaped the malware threat.

 

Two new security threats, a malware-as-a-service (MaaS) platform and a ransomware-as-a-service (RaaS) program, are designed to specifically target machines running Apple macOS.

 

Two new security threats, a malware-as-a-service (MaaS) platform and a ransomware-as-a-service (RaaS) program, are designed to specifically target machines running Apple macOS.

The MaaS platform, known as "MacSpy," responds to what its authors feel is an ongoing lack of "sophisticated malware for Mac users". Of course, that perception is not entirely accurate. We've seen numerous sophisticated malware strainsdeveloped for Macs over the past year or so.

 

It's true, however, that MacSpy takes this budding proliferation to the next level by making macOS malware more accessible to users with low levels of technical expertise.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

 

Gust MEES's insight:

Just because you’re using a Mac doesn’t mean you’ve escaped the malware threat.

 

Two new security threats, a malware-as-a-service (MaaS) platform and a ransomware-as-a-service (RaaS) program, are designed to specifically target machines running Apple macOS.

 

Two new security threats, a malware-as-a-service (MaaS) platform and a ransomware-as-a-service (RaaS) program, are designed to specifically target machines running Apple macOS.

The MaaS platform, known as "MacSpy," responds to what its authors feel is an ongoing lack of "sophisticated malware for Mac users". Of course, that perception is not entirely accurate. We've seen numerous sophisticated malware strainsdeveloped for Macs over the past year or so.

 

It's true, however, that MacSpy takes this budding proliferation to the next level by making macOS malware more accessible to users with low levels of technical expertise.

 

Learn more / En savoir plus / Mehr erfahren:

 

http://www.scoop.it/t/apple-mac-ios4-ipad-iphone-and-in-security

 

 

No comment yet.
Scooped by Gust MEES
May 23, 2017 11:58 AM
Scoop.it!

Transparenzbericht: Apple hat offenbar ersten National Security Letter erhalten | #Privacy #Datenschutz

Transparenzbericht: Apple hat offenbar ersten National Security Letter erhalten | #Privacy #Datenschutz | Apple, Mac, MacOS, iOS4, iPad, iPhone and (in)security... | Scoop.it
Zum ersten Mal hat Apple den Erhalt eines National Security Letters im halbjährlichen Transparenzbericht aufgeführt. Die Zahl der Anfragen der US-Regierung zur nationalen Sicherheit stieg außerdem erneut sprunghaft an.

 

Learn more / En savoir plus / Mehr erfahren:

 

https://gustmees.wordpress.com/2013/12/21/privacy-in-the-digital-world-shouldnt-we-talk-about-it/

 

https://gustmees.wordpress.com/?s=privacy

 

Gust MEES's insight:
Zum ersten Mal hat Apple den Erhalt eines National Security Letters im halbjährlichen Transparenzbericht aufgeführt. Die Zahl der Anfragen der US-Regierung zur nationalen Sicherheit stieg außerdem erneut sprunghaft an.

 

Learn more / En savoir plus / Mehr erfahren:

 

https://gustmees.wordpress.com/2013/12/21/privacy-in-the-digital-world-shouldnt-we-talk-about-it/

 

https://gustmees.wordpress.com/?s=privacy

 

No comment yet.