Malwarehigh
Malware report Q1 2024
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-32434 | Integer Overflow in Apple iOS, iPadOS, macOS and watchOS Grants Kernel-Privilege Code Execution | 7.8 | 58% | KEV | KEV |
| CVE-2023-38606 | Kernel State-Tampering Flaw in Apple iOS, iPadOS, macOS, tvOS and watchOS | 5.5 | 3% | KEV | KEV |
From the original article
7 min read at securelist.com
Last June, we published a series of reports on Operation Triangulation , a previously unknown iOS malware platform distributed via zero-click iMessage exploits that allowed an attacker to browse and modify device files, get passwords and credentials stored in the keychain, retrieve geo-location information and execute additional modules that extended their control over compromised devices.
By @Securelist · securelist.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.