Leaked DarkSword and Coruna kits infect employee iPhones
One DarkSword chain started from an Instagram ad and targeted iOS 18.4.0 through 18.7.2 to steal Keychain data and crypto.
Stories per day · 30 days
5 RSS
Relatedapple6ios4hexacon3spyware3android2apt292bootrom2cryptocurrency2jailbreak2untethered2watering-hole2bug-bounty1cellebrite1commentary1consumer1consumer-tech1coruna1crypto1
25 stories, newest first · one card per story
Stories tagged #iphone
APT29 watering holes target patched iPhones and Android
Attackers served exploit chains for already-patched iOS and Android flaws via legitimate websites and lookalikes.
1
APT29 Uses Watering Hole Attacks on Trusted Sites
APT29 planted malicious scripts on real and cloned websites in the US, Ukraine and Europe to compromise outdated iPhones and Androids by stealing cookies and data.
3
BootROM flaws in older iPhones expose crypto seed phrases to physical attacks
Physical access to affected iPhones allows BootROM code execution before iOS loads but Secure Enclave protections remain intact.
Unpatchable hardware flaws in older iPhones allow crypto seed theft
BootROM and usbliter8 exploits in older iPhones (4S to iPhone 11) enable attackers with physical access to steal recovery phrases despite factory resets and airplane mode.
Apple warns iPhone users in 99 countries of mercenary spyware
The October 30 notices are separate from August alerts covering 110 countries, and Apple named no spyware or flaw.
Crypto thieves infect iPhones via ads on hundreds of compromised sites
iVerify says victims only need to view an ad, including one served on Instagram.
1
Apple accepts Security Research Device applications through October 30
Approved researchers get a 12-month loaner iPhone with shell access, custom entitlements, and kernel changes.
Vergecast debates the iPhone Duo score and a PHP flaw
Hosts revisit a 7/10 iPhone Duo review, then mention a PHP flaw, AI shopping agents, and Gemini without new technical detail.
Researchers claim iPhone, Signal and iMessage hacks at Hexacon
Calif.io showed the demos in Paris on October 16 and said full details will come later.
Book says Dutch spies viewed Kushner’s iPhone after GRU breach
Matthew Cole writes that MIVD saw a Dubai account that had received hundreds of millions from Azerbaijan.
Pegasus confirmed on Belgrade rector's iPhone before Serbia election
Citizen Lab reports a high-confidence zero-click infection but does not name the operator, date, or flaw.
Leaked Cellebrite note describes an iPhone Advanced Unlocks product
The leaked note says a dedicated appliance can reach after-first-unlock iPhones from about 8 meters, including with Stolen Device Protection on.
Researchers Demonstrate iOS 27.0.1 Untethered Jailbreak on iPhone 18 Pro
Researchers showed an untethered iOS 27.0.1 jailbreak on an iPhone 18 Pro at Hexacon.
iOS 27.0.1 Untethered Jailbreak Demonstrated on iPhone 18 Pro
Researchers showed an untethered iOS 27.0.1 jailbreak on iPhone 18 Pro at Hexacon without releasing it.
Podcast: Leak Show Cops Can Break into Locked iPhones
A 404 Media podcast says a leak shows police can bypass the iPhone inactivity reboot.
Apple’s Verified Photography System
Apple’s Reference Image system verifies iPhone photos without linking them to a specific device or photographer.
Possible Vulnerability in Apple’s Automatic Reboot
Magnet Forensics' GrayKey Preserve reportedly bypasses iPhone inactivity reboot so forensic data stays available.
Cops Can Bypass iPhone’s Automatic Reboot to Get Into Locked Phones, Leaked Video Claims
Magnet Forensics' GrayKey Preserve claims to freeze iPhones in After First Unlock, bypassing Apple's inactivity reboot.
Fake iPhone Duo preorder scam triggers DarkSword attack
A fake iPhone Duo preorder page uses the patched DarkSword chain to steal iPhone data on visit.
Product showcase: A photo can fool your eyes. Verdict checks the evidence
Verdict, an offline iPhone app, scores media for AI generation but mislabeled a real concert video as synthetic.
iPhone owners can now submit a claim in Apple’s $250 million Siri AI lawsuit
Apple pays $250 million settlement for delayed Siri AI features promised with iPhone 16 launch.
Apple Reference Image: A New Approach for Verified Photography
Apple introduces Reference Image, hardware-backed verifiable photography on iPhone 18 Pro using sensor signing and Private Cloud Compute to counter AI-generated fakes.
Apple has a new way prove your iPhone photos aren’t AI slop
Apple launched Reference Image, cryptographically signing iPhone 18 Pro photos via Private Cloud Compute to prove image authenticity.
1