Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: Apple

FCM keys expose millions of users to spam and phishing

Security researcher Abhishek Dharani, known as Abss, has blogged an investigation related to a vulnerability in Firebase Cloud Messaging (FCM), a cloud solution for messages and notifications on...

References:

abss.me

portswigger.net

cybernews.com

nakedsecurity.sophos.com

Tags:

Google reveals how an iOS malware campaign works

In early 2019, Google’s Threats Analysis Group (TAG) notified Apple about 14 vulnerabilities affecting iPhone devices from versions iOS 10 to iOS 12. This vulnerabilities was patched on out-of-band...

References:

googleprojectzero.blogspot.com

support.apple.com

forbes.com

unaaldia.hispasec.com

Tags:

WhatsApp fixes a security issue in video calls

Natalie Silvanovich, security researcher at Google Project Zero, found a vulnerability in August 2018, reported later to WhatsApp, that could compromise an account by simply responding to a video...

References:

twitter.com

cnbc.com

thehackernews.com

nakedsecurity.sophos.com

bleepingcomputer.com

unaaldia.hispasec.com

Tags:

Trend Micro Apps are removed from the App Store for collecting data

Apple has been forced to remove several applications from its Mac App Store from Trend Micro security provider, because they collected data from their users without their consent. Among the...

References:

blog.trendmicro.com

blog.malwarebytes.com

cyberscoop.com

thehackernews.com

searchsecurity.techtarget.com

ciberseguridadlatam.com

genbeta.com

Tags:

Apple

Cyberespionage

Information leakage

A 16-year-old young accused of stealing 90GB of data from Apple's servers

A 16-year-old Australian teenager managed to get into Apple's servers and download approximately 90GB of data, although the company has assured in a statement that the data of its customers have...

References:

nakedsecurity.sophos.com

thehackernews.com

reuters.com

xataka.com

Tags:

Apple

Information leakage

Discovered a bug in macOS High Sierra

Patrick Wardle, a former US NSA employee, discovered an error in macOS High Sierra by which an attacker could access to password protected areas.MacOS has a system to avoid the unwanted loading of...

References:

threatpost.com

genbeta.com

hotforsecurity.bitdefender.com

apple5x1.com

Tags:

Apple

Vulnerability

A virus closes several factories of TSMC, one of the manufacturers of iPhone

Taiwan Semiconductor Manufacturing Company (TSMC), one of the largest manufacturers semiconductors and processor in the world, was recently forced to close several factories during the weekend,...

References:

bloomberg.com

thehackernews.com

blog.segu-info.com.ar

applesfera.com

xataka.com

Tags:

Apple

Incident

Malware

Parental control app filters credentials in plain text

The application TeenSafe, which allows to track the activity of the child with the mobile, had its servers in the Amazon cloud without any access control measure, so anyone could access the...

References:

zdnet.com

gizmodo.com

techspot.com

Tags:

Apple

Information leakage

Coldroot, keylogger malware for macOS

Patrick Wardle, chief research officer at Digital Security, has revealed the details of a malicious software that affects macOS operating systems, collecting all the information that the user enter...

References:

zdnet.com

softzone.es

seguridadapple.com

redeszone.net

Tags:

Apple

Malware

New malware campaign distributed through Facebook Messenger

A new malware campaign has been distributed through messages on the Facebook Messenger platform. The messages, through which the receiver is prompted to enter a web address that supposedly shows a...

References:

hackread.com

thehackernews.com

securelist.com

Tags:

Corporate access

Cybersecurity Highlights

FCM keys expose millions of users to spam and phishing

Google reveals how an iOS malware campaign works

WhatsApp fixes a security issue in video calls

Trend Micro Apps are removed from the App Store for collecting data

A 16-year-old young accused of stealing 90GB of data from Apple's servers

Discovered a bug in macOS High Sierra

A virus closes several factories of TSMC, one of the manufacturers of iPhone

Parental control app filters credentials in plain text

Coldroot, keylogger malware for macOS

New malware campaign distributed through Facebook Messenger

Pages