Exploit / PoCcritical
Operation Triangulation iOS Attack Details Revealed
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-32435+1 related CVE | Memory Corruption in Apple WebKit (iOS, iPadOS, macOS, Safari) Enables Code Execution | 8.8 group max | 23% | KEV | KEV |
| CVE-2023-38606 | Kernel State-Tampering Flaw in Apple iOS, iPadOS, macOS, tvOS and watchOS | 5.5 | 3% | KEV | KEV |
| CVE-2023-41990 | Font Parsing Code Execution Flaw in Apple iOS, iPadOS, macOS, tvOS, watchOS | 7.8 | 1% | KEV | KEV |
From the original article
2 min read at infosecurity-magazine.com
In an update to previous reports, Kaspersky’s Global Research and Analysis Team (GReAT) has disclosed new insights into the notorious Operation Triangulation at the recent Security Analyst Summit. The investigation delves into the complex cyber assault that targeted both the public and Kaspersky’s own employees, offering fresh details on the attack chain and its implications for iOS security.
By Alessandro Mascellino · infosecurity-magazine.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.