Google TAG argues that Italian surveillance firm RCS Labs was helped by ISPs to infect mobile users
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-4344 | Memory Corruption Flaw in Apple iOS, macOS, tvOS, and watchOS (Pre-2018 Releases) | 7.8 | 2% | KEV | KEV |
| CVE-2019-8605 | Use-After-Free in Apple iOS, macOS, tvOS, watchOS Enables Privileged Code Execution | 7.8 | 18% | KEV | KEV |
| CVE-2020-3837 | Memory Corruption in Apple iOS, macOS, tvOS, watchOS Enables Kernel-Level Code Execution | 7.8 | 15% | KEV | KEV |
| CVE-2020-9907 | Memory Corruption with Kernel Privileges in Apple iOS, iPadOS, and tvOS | 7.8 | 3% | KEV | KEV |
| CVE-2021-30883 | Kernel Memory Corruption Zero-Day in Apple iOS, iPadOS, macOS, tvOS, watchOS | 7.8 | 15% | KEV | KEV |
| CVE-2021-30983 | Kernel Buffer Overflow in Apple iOS and iPadOS Enables Arbitrary Code Execution | 7.8 | 3% | KEV | KEV |
From the original article
3 min read at securityaffairs.com
Google’s Threat Analysis Group (TAG) revealed that the Italian spyware vendor RCS Labs was supported by ISPs to spy on users. Researchers from Google’s Threat Analysis Group (TAG) revealed that the Italian surveillance firm RCS Labs was helped by some Internet service providers (ISPs) in Italy and Kazakhstan to infect Android and iOS users with their spyware.
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.