0-Day Remote iPhone Full Access Being Abused, Update Immediately
0-Day Remote iPhone Full Access Being Abused, Update Immediately
citizenlab.ca
BLASTPASS: NSO Group iPhone Zero-Click, Zero-Day Exploit Captured in the Wild - The Citizen Lab
27 comments
-
-
Damn…so this isn’t the fun kernel level access exploit.
This is the boring, my data could be compromised exploit.
-
Fuck, the NSO group managed that shit again?!
-
lmao, iMessage again ? zero user interaction needed, again ?!
Well done Apple
-
It’s literally been 3 days since Android had a vulnerability of this exact nature: remote code execution with zero user interaction required (CVE-2023-35674).
Every piece of software has vulnerabilities lurking within. What matters is the velocity at which vendors address and resolve those vulnerabilities. Apple and Google are both exemplary at getting patches out quickly.
-
butbutbut... blue box
-
-
Article missing, here is the archive link. https://web.archive.org/web/20230908134811/https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/
Edit: able to access now but I'll leave it here just in case.
-
It looks like I need to make some space for an update -.-
-
I just relistened to Dark Net Diaries episode about this! (episode 100, titled NSO) Highly Recommend
-
Is this fixed if using the iOS 17 Beta?
-
I'd assume in the next public/developer preview, yeah
-
-
Lockdown mode stops it.
-
ios "the more secure choice" try not to have a 0-day exploit challenge
27 comments
Couldn't think of a better title, TL;DR via receiving an iMessage with a specially crafted image, an attacker can get full access to your device. Update iOS immediately to resolve the issue
PSA: Android just published a patch for a very similar vulnerability in their September Security release. You should update your Android devices ASAP.
Which CVE is that and where can i read a description of how this vulnerability is being used?
Get off that high horse.
How do you block MMS from unknown senders on iOS?
at this point most iphone users are very much used to reicive images within imessage and have already forgotten that mms existed or are too young to actually ever had to deal with it, so to them it's just yet another picture.
I'd never get random dick pictures that way though.