
It's possible to hack iPhones / iPads just by sending an email to targeted users.
Hackers have been exploiting critical 0-click + 0-day RCE #vulnerability in the default mail app installed on millions of Apple devices.
Details — https://thehackernews.com/2020/04/zero-day-warning-its-possible-to-hack.html
#infosec
According to the researchers, there are two remote code execution flaws in the Apple's mail app, both existed for the last 8 years since the release of #iOS 6 and also affect the latest iOS 13.4.1 version.
At the time of tweet, only iOS beta 13.4.5 contains security patches.
At the time of tweet, only iOS beta 13.4.5 contains security patches.
What's more worrisome...
Researchers claim multiple groups of attackers are already exploiting these flaws—for at least 2 years as zero-days in the wild—to target individuals from various industries and organizations, MSSPs from Saudi Arabia & Israel, and journalists in Europe.
Researchers claim multiple groups of attackers are already exploiting these flaws—for at least 2 years as zero-days in the wild—to target individuals from various industries and organizations, MSSPs from Saudi Arabia & Israel, and journalists in Europe.
Besides this, it could be tough for Apple users to know if they were targeted as part of these cyber-attacks because attackers delete the malicious email immediately after gaining remote access to the victims' device.
Read here: https://thehackernews.com/2020/04/zero-day-warning-its-possible-to-hack.html
#cybersecurity #infosec
Read here: https://thehackernews.com/2020/04/zero-day-warning-its-possible-to-hack.html
#cybersecurity #infosec