Search

Items tagged with: apple

The media in this post is not displayed to visitors. To view it, please go to the original post.

📝🚨 New blog post: How a bug in Archive Utility allowed access to protected app data (including iMessage and WhatsApp chats, and Safari cookies) without any permissions.

The bug could also be exploited to hijack installed apps such as Signal and 1Password to perform phishing attacks.

Apple fixed the issue in macOS 26.4 as CVE-2026-28910, five months after we reported it

#Apple #macOS #privacy #security #cybersecurity #infosec

mysk.blog/2026/05/19/cve-2026-…

CVE-2026-28910: Breaking macOS App Sandbox Data Containers, TCC, and Hijacking Apps Using Archive Utility

Until macOS 26.4, Archive Utility had nearly unrestricted filesystem access. Combined with a drag-and-drop sandbox quirk, this let an attacker bypass App Sandbox data containers, Transparency, Consent, and Control (TCC) protections, and hijack third-…
Mysk Blog – In-Depth Cybersecurity & Mobile App Privacy Research
#infosec #security #privacy #apple #cybersecurity #macos

The media in this post is not displayed to visitors. To view it, please go to the original post.
The media in this post is not displayed to visitors. To view it, please go to the original post.

😎🔬 Proton VPN just got updated. When iOS updated the app with the kill switch on, it was a total mess: iOS blocked internet for nearly 6 minutes, then terminated the app and its VPN tunnel, exposing iPhone traffic and IP. The VPN required a manual restart 😠.
Watch this demo:

More context:

mastodon.social/@mysk/11647334…

#privacy #security #infosec #iOS #VPN #Apple

Mysk🇨🇦🇩🇪

2026-04-26 22:22:41

mastodon - Link to source

😱 iOS 26.4.2 still leaks the real IP when updating VPN apps. Motivated by Mullvad's recent blog, we made a website that logs the iPhone IP every second. We started Mullvad VPN, opened the website, then let Mullvad update in the background. See the leaks in action.. 🤯

Link to Mullvad blog post:

mullvad.net/en/blog/force-all-…

#privacy #iOS #security #infosec


Force all app traffic into the tunnel

Apple's networking stack are preventing the iOS app from being as secure as possible, we have now secured our app to mitigate this.
Mullvad VPN

#infosec #security #privacy #apple #vpn #ios

The media in this post is not displayed to visitors. To view it, please go to the original post.

FYI: FaceTime calls expose your IP to other participants. In Settings → Privacy & Security → App Privacy Report you can see recent call IPs, and others can see yours. Unlike Signal and WhatsApp, Apple offers no option to relay calls through its servers to hide your IP

#privacy #infosec #security #Apple #iOS

#infosec #security #privacy #apple #ios

This custom $1 coin initiative from the US Mint is so odd to me.

At least it celebrates a wide variety of actually useful and important subjects. Pennsylvania's coin is for the polio vaccine, Ohio got the Underground Railroad, etc. 33 states in total have received coins so far.

Jobs was important. But is he really the biggest or most important thing to ever come out of California?

#SteveJobs #Apple

appleinsider.com/articles/26/0…

Steve Jobs is getting a marked-up $1 coin, courtesy US Mint

The 2026 American Innovation $1 Coin project will honor former Apple CEO Steve Jobs with a one-dollar coin bearing his image that costs, at best, $1.55 each.
Amber Neely (AppleInsider)
#apple #stevejobs

⇧