#iossecurity — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #iossecurity, aggregated by home.social.
-
Seems like apple whilst working on optimisations for ios27 has kindly removed a lot of memset(0) ‘s
Happy hunting #iukuk #apple #iossecurity -
Storing passwords and tokens securely on iOS? Keychain Services API handles encryption under the hood, but its query-based C API can feel dated. This guide walks through save, retrieve, and update operations with clear Swift examples.
🔗: https://tanaschita.com/ios-keychain-secure-data-storage/ by Natascha Fadeeva (@tanaschita)
-
DarkSword iOS exploit kit leaked on GitHub.
• 6-vuln chain
• Targets iOS 18 and older
• Enables full spyware deployment
• Now usable by low-skill actors
Shift from targeted espionage → scalable threat. -
DarkSword iOS exploit kit leaked on GitHub.
• 6-vuln chain
• Targets iOS 18 and older
• Enables full spyware deployment
• Now usable by low-skill actors
Shift from targeted espionage → scalable threat. -
Darksword exploit kit chains 6 iOS flaws to achieve full device compromise.
• RCE → kernel access
• Used by multiple threat actors
• High-risk data exfiltrationPatch immediately 👇
https://www.technadu.com/darksword-exploit-kit-deploying-ios-spyware-on-iphones-adopted-by-multiple-threat-actors/623708/ -
Darksword exploit kit chains 6 iOS flaws to achieve full device compromise.
• RCE → kernel access
• Used by multiple threat actors
• High-risk data exfiltrationPatch immediately 👇
https://www.technadu.com/darksword-exploit-kit-deploying-ios-spyware-on-iphones-adopted-by-multiple-threat-actors/623708/ -
Reports link the Coruna iPhone exploit framework to Trenchant, the offensive cyber division of U.S. contractor L3Harris.
Originally built for intelligence operations, the toolkit allegedly leaked and was later used by Russian and China-linked threat actors.
-
"¡Alerta iPhone! 'Coruna': kit de exploits ultra-sofisticado (posiblemente del gobierno EE.UU.) se filtra al mercado negro. Usa 23 vulnerabilidades en iOS 13-17.2.1 → hackea solo visitando web maliciosa. Actualiza YA a iOS 26 para blindarte. No es broma. 🔒#Coruna #iOSSecurity"
-
🔒 Scopri i migliori VPN per iPhone e iPad del gennaio 2026! Sicurezza e privacy a portata di tap. #VPN2026 #iOSsecurity
-
We’ve been trained to think privacy is a feature you toggle on. In reality, it’s an ongoing negotiation between users, systems, companies, and incentives that rarely align.
What surprised me most here isn’t just the number, roughly 3,400 tracking-related calls per hour, but how invisible they are. A phone sitting quietly on your desk can still be busy talking to the world. Silence, it turns out, is not the same as restraint.
The deeper lesson is about trust. When companies market privacy as a core value, every background behavior becomes part of that promise. Transparency isn’t about fewer connections; it’s about honest ones. Privacy doesn’t fail loudly. It fails politely, efficiently, and at scale.
TL;DR
🧠 Idle devices can still generate massive data traffic
⚡ Volume matters less than visibility and consent
🎓 Privacy is a system design choice, not a settings page
🔍 Trust erodes when defaults do more than users expecthttps://www.webpronews.com/iphones-leak-data-via-3400-hourly-tracking-calls-sparking-outrage/
#Privacy #TechEthics #DigitalTrust #iOSSecurity #iPhone #security #cloud #infosec #cybersecurity
-
We’ve been trained to think privacy is a feature you toggle on. In reality, it’s an ongoing negotiation between users, systems, companies, and incentives that rarely align.
What surprised me most here isn’t just the number, roughly 3,400 tracking-related calls per hour, but how invisible they are. A phone sitting quietly on your desk can still be busy talking to the world. Silence, it turns out, is not the same as restraint.
The deeper lesson is about trust. When companies market privacy as a core value, every background behavior becomes part of that promise. Transparency isn’t about fewer connections; it’s about honest ones. Privacy doesn’t fail loudly. It fails politely, efficiently, and at scale.
TL;DR
🧠 Idle devices can still generate massive data traffic
⚡ Volume matters less than visibility and consent
🎓 Privacy is a system design choice, not a settings page
🔍 Trust erodes when defaults do more than users expecthttps://www.webpronews.com/iphones-leak-data-via-3400-hourly-tracking-calls-sparking-outrage/
#Privacy #TechEthics #DigitalTrust #iOSSecurity #iPhone #security #cloud #infosec #cybersecurity
-
How do you build iOS apps that don't crumble when someone jailbreaks their phone or spoofs their location? This article shares production-tested security patterns covering jailbreak detection, certificate pinning, secure storage, and more. Real-world defense strategies that actually work, not just theoretical best practices.
🔗: https://medium.com/@wesleymatlock/treat-your-data-like-a-backstage-pass-ios-security-best-practices-af21244dd35e by Wesley Matlock
-
🔒Scopri i migliori VPN per iPhone e iPad di Agosto 2025! Proteggi la tua privacy e naviga in sicurezza ovunque tu sia! #VPN2025 #iOSSecurity
-
📬 SparkKitty – der Foto-Räuber, den (noch) niemand auf dem Schirm hat
#Malware #Smartphones #AndroidTrojaner #AppStoreGefahren #FotoStealer #iOSSecurity #KryptoSicherheit #MobileMalware https://sc.tarnkappe.info/1f7618 -
📬 SparkKitty – der Foto-Räuber, den (noch) niemand auf dem Schirm hat
#Malware #Smartphones #AndroidTrojaner #AppStoreGefahren #FotoStealer #iOSSecurity #KryptoSicherheit #MobileMalware https://sc.tarnkappe.info/1f7618 -
Imagine malware hiding in plain sight—trusted apps in official stores infected with SparkKitty are quietly stealing crypto secrets. How secure is your phone, really?
https://thedefendopsdiaries.com/understanding-the-sparkkitty-malware-threat/
#sparkkitty
#malwarethreat
#mobilesecurity
#iossecurity
#androidsecurity -
A single iMessage might now compromise your iPhone—no clicks needed. Graphite spyware is targeting journalists worldwide and raising serious questions about our digital safety. Curious to learn more?
https://thedefendopsdiaries.com/graphite-spyware-a-zero-click-threat-to-journalists/
#graphitespyware
#zeroclickexploit
#iossecurity
#cyberthreats
#journalistprotection -
Installing unsigned or fake-signed iOS apps for testing without a Mac, Xcode, or access to proper signing tools can be a challenge.
Since iOS normally relies on the App Store to handle signing, getting apps onto a device manually isn’t always straightforward.
In our latest blog, we break down the main approaches to sideloading using tweaks on jailbroken devices, sideloading platforms like AltStore and Sideloadly, and on-device tools like TrollStore.
Whether your device is jailbroken or not, you’ll find a method that works.
📌Read here: https://www.pentestpartners.com/security-blog/how-to-load-unsigned-or-fake-signed-apps-on-ios/
#iOSSecurity #MobileAppTesting #Sideloading #CyberSecurity #infosec
-
Installing unsigned or fake-signed iOS apps for testing without a Mac, Xcode, or access to proper signing tools can be a challenge.
Since iOS normally relies on the App Store to handle signing, getting apps onto a device manually isn’t always straightforward.
In our latest blog, we break down the main approaches to sideloading using tweaks on jailbroken devices, sideloading platforms like AltStore and Sideloadly, and on-device tools like TrollStore.
Whether your device is jailbroken or not, you’ll find a method that works.
📌Read here: https://www.pentestpartners.com/security-blog/how-to-load-unsigned-or-fake-signed-apps-on-ios/
#iOSSecurity #MobileAppTesting #Sideloading #CyberSecurity #infosec
-
🚨 iVerify's iOS app detected 11 new Pegasus infections in December 2024! 🦠 Shockingly, about half of the affected devices didn’t receive Threat Notifications from Apple. A major security concern! 🔐 #iOSSecurity #PegasusSpyware #Apple #TechNews #Privacy
https://posivi.com/iverifys-ios-app-detected-11-new-pegasus-infections-in-december-2024/
-
🚨 iVerify's iOS app detected 11 new Pegasus infections in December 2024! 🦠 Shockingly, about half of the affected devices didn’t receive Threat Notifications from Apple. A major security concern! 🔐 #iOSSecurity #PegasusSpyware #Apple #TechNews #Privacy
https://posivi.com/iverifys-ios-app-detected-11-new-pegasus-infections-in-december-2024/
-
I always find these kinds of posts fascinating and can usually pick up a glimpse of iOS design from them. In this case, the article talks a lot about the Secure Enclave and how it interacts with other parts of the phone. I also appreciate the before first unlock / after first unlock call outs.
#ios #security #iossecurity #blogposts #iphone https://naehrdine.blogspot.com/2024/11/reverse-engineering-ios-18-inactivity.html
-
TCC iOS Subsystem Vulnerability Exposes iCloud Data To Attackers https://cybersecuritynews.com/tcc-ios-subsystem-flaw-exposes-icloud-data/ #VulnerabilityExploitation #CyberSecurityNews #VulnerabilityNews #DataPrivacy #iOSSecurity #Apple
-
TCC iOS Subsystem Vulnerability Exposes iCloud Data To Attackers https://cybersecuritynews.com/tcc-ios-subsystem-flaw-exposes-icloud-data/ #VulnerabilityExploitation #CyberSecurityNews #VulnerabilityNews #DataPrivacy #iOSSecurity #Apple
-
CocoaPods flaws left iOS, macOS apps open to supply-chain attack https://www.csoonline.com/article/2512935/cocoapods-flaws-left-ios-macos-apps-open-to-supply-chain-attack.html #DevelopmentLibrariesandFrameworks #DevelopmentTools #MacOSSecurity #iOSSecurity
-
CocoaPods flaws left iOS, macOS apps open to supply-chain attack https://www.csoonline.com/article/2512935/cocoapods-flaws-left-ios-macos-apps-open-to-supply-chain-attack.html #DevelopmentLibrariesandFrameworks #DevelopmentTools #MacOSSecurity #iOSSecurity
-
Hackers Exploiting iOS 0-Day To Attack iPhones – Patch Now! https://gbhackers.com/ios-0-day-attack-patch-now/ #ZerodayVulnerabilities #CVE/vulnerability #CyberSecurityNews #ApplePatches #iOSSecurity #Apple
-
Wednesday == hump day == patch yo shit day!
https://support.apple.com/en-us/HT201222
https://support.apple.com/kb/HT213813
https://support.apple.com/kb/HT213814
https://support.apple.com/kb/HT213813
https://support.apple.com/kb/HT213810
https://support.apple.com/kb/HT213809
https://support.apple.com/kb/HT213812
https://support.apple.com/kb/HT213808 -
Wednesday == hump day == patch yo shit day!
https://support.apple.com/en-us/HT201222
https://support.apple.com/kb/HT213813
https://support.apple.com/kb/HT213814
https://support.apple.com/kb/HT213813
https://support.apple.com/kb/HT213810
https://support.apple.com/kb/HT213809
https://support.apple.com/kb/HT213812
https://support.apple.com/kb/HT213808 -
Mobile Pentesting 101 – How To Set Up Your Ios Environment
https://securitycafe.ro/2023/06/12/mobile-pentesting-101-how-to-set-up-your-ios-environment/
-
Develop your own zero day vulnerabilities in iOS : https://faisalmemon.github.io/the-road-to-zero/ #iOSSecurity #MobileSecurity
-
Italian spyware firm is hacking into iOS and Android devices, Google says - Google's Threat Analysis Group (TAG) has identified Italian vendor RCS Lab as a spywar... - https://www.computerworld.com/article/3665050/italian-spyware-firm-is-hacking-into-ios-and-android-devices-google-says.html#tk.rss_all #androidsecurity #iossecurity #google #apple
-
Unpatchable bug in millions of iOS devices exploited, developer claims - Enlarge / Devices as recent as the iPhone X, based on Apple's A11 chip, are claimed to be vulnerabl... more: https://arstechnica.com/?p=1575923 #jailbreaking #iossecurity #biz&it #tech #ios
