Apple deprecates TLS 1.0 and 1.1 with iOS 15, macOS 12, more

Apple this week continued work to deprecate Transport Layer Security 1.0 and 1.1 from its various operating systems, replacing the long-in-the-tooth security protocols with more modern versions.

Mikey Campbell 4 years ago 0

In leaked memo, Tim Cook says leakers do not belong inside Apple

Following leaks about his all-hands Apple meeting about pay equity, Tim Cook has told staff that the company does not "tolerate disclosures of confidential information."

William Gallagher 4 years ago 26

Apple partially patches new macOS Finder zero-day vulnerability

A newly discovered bug in all versions of macOS, including the latest macOS Big Sur, allows attackers to run arbitrary code remotely with the help of files embedded in emails.

AppleInsider Staff 4 years ago 10

Lock screen bypass enables access to Notes in iOS 15

A new iOS vulnerability discovered by researcher Jose Rodriguez enables would-be attackers to bypass a secured iPhone lock screen and access notes by leveraging a combination of VoiceOver and common sharing tools.

Mikey Campbell 4 years ago 0

US company tied to iPhone hacking tool deployed by UAE in 2016

In 2016, an iPhone exploit was purchased and deployed by the United Arab Emirates in a surveillance campaign targeting dissidents, activists, foreign leaders and other persons of interest. A new report claims an American company developed and sold the hack.

Mikey Campbell 4 years ago 0

iOS 14.8, iPadOS 14.8 tighten security, close off 'Blastdoor' attacks

Apple's update to iOS 14.8 and iPadOS 14.8 introduce fixes to two vulnerabilities, including one that enabled attacks that worked around Apple's Blastdoor protective system.

Malcolm Owen 4 years ago 15

Researcher testing Apple CloudKit accidentally took Shortcuts completely down

A security researcher has explained how his investigation into Apple's CloudKit platform inadvertently brought down Siri Shortcuts earlier in 2021.

Mike Peterson 4 years ago 9

JumpCloud secures $159M funding round to secure enterprise Macs

The cloud directory service JumpCloud has raised $159 million and a $2.56 billion valuation in a new funding round, assisted in part by an expansion of its Mac device management services.

Malcolm Owen 4 years ago 0

UK government lauds Apple's CSAM plans as it seeks to skirt end-to-end encryption

Priti Patel, Home Secretary of the UK, penned an op-ed this week highlighting a need for enhanced child protection online, and in doing so lauded Apple's now-postponed CSAM monitoring plans.

AppleInsider Staff 4 years ago 38

Frustrated security researchers speak out about Apple's bug bounty program

Apple's bug bounty program is frustrating the security research community, with complaints spanning poor communication, confusion about payments, and more.

Mike Peterson 4 years ago 5

After chiding Apple on privacy, Germany says it uses Pegasus spyware

Germany's Federal Criminal Police Office (BKA) purchased access to NSO Group's Pegasus spyware in 2019 after internal efforts to create similar iOS and Android surveillance tools failed.

AppleInsider Staff 4 years ago 18

Mark Zuckerberg may have lied to Congress about who can see WhatsApp messages

The Facebook-owned WhatsApp regularly boasts of using end-to-end encryption and keeping communications between users private, but a report alleges that some monitoring of messages does take place, and that Mark Zuckerberg may not have told the truth to the U.S. Senate.

Malcolm Owen 4 years ago 14

New malicious Lightning cable can steal user data from a mile away

A new and upgraded version of a malicious Lightning cable that can steal user data and remotely send it to an attacker illustrates the threat of untrusted accessories.

Mike Peterson 4 years ago 31

Security of Quebec vaccine passport app's QR codes questioned

Flaws have been uncovered in a vaccine passport iOS app, after security researchers and hackers have shown there are many security issues with Quebec's mobile verification system.

Malcolm Owen 4 years ago 21

T-Mobile CEO 'sorry' for data breach that affected 54 million users

CEO Mike Sievert has issued a public apology for T-Mobile's failure to prevent the cyberattack that saw personal details of more than 50 million people stolen.

William Gallagher 4 years ago 13

Load More