Malwarecritical
4-year campaign backdoored iPhones using possibly the most advanced exploit ever
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-32435+1 related CVE | Memory Corruption in Apple WebKit (iOS, iPadOS, macOS, Safari) Enables Code Execution | 8.8 group max | 23% | KEV | KEV |
| CVE-2023-38606 | Kernel State-Tampering Flaw in Apple iOS, iPadOS, macOS, tvOS and watchOS | 5.5 | 3% | KEV | KEV |
| CVE-2023-41990 | Font Parsing Code Execution Flaw in Apple iOS, iPadOS, macOS, tvOS, watchOS | 7.8 | 1% | KEV | KEV |
From the original article
8 min read at arstechnica.com
“Triangulation” infected dozens of iPhones belonging to employees of Moscow-based Kaspersky. Researchers on Wednesday presented intriguing new findings surrounding an attack that over four years backdoored dozens if not thousands of iPhones, many of which belonged to employees of Moscow-based security firm Kaspersky.
arstechnica.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.