Cybersecurity Highlights

This section registers the most relevant incidents or public events related to the cybersecurity and information and communication technologies (ICT), in a way that a chronological history of them is available, together with their main links, references and information sources.

Post related to: Apple

API requests not authenticated by mobile device monitoring services

Consumer spyware is often sold under the guise of child or family surveillance software, but is also known as stalkerware because of its ability to track and monitor.The website TechCrunch...

References:

techcrunch.com

cert.org

yahoo.com

adexchanger.com

Tags:

Quanta Computer, victim of REvil ransomware threatening Apple

The operators of the REvil ransomware, also known as Sodinokibi, have threatened Apple with the publication of the company's future product designs, coinciding with the Spring Loaded event where...

References:

quantatw.com

therecord.media

bankinfosecurity.com

xataka.com

Tags:

Unauthorized access to a Nitro database

The global document management company, Nitro, reported, on October 21, on limited access to one of its databases by an unauthorized third party.The affected database supports certain online...

References:

ir.gonitro.com

bleepingcomputer.com

siliconangle.com

redeszone.net

Tags:

FCM keys expose millions of users to spam and phishing

Security researcher Abhishek Dharani, known as Abss, has blogged an investigation related to a vulnerability in Firebase Cloud Messaging (FCM), a cloud solution for messages and notifications on...

References:

abss.me

portswigger.net

cybernews.com

nakedsecurity.sophos.com

Tags:

Google reveals how an iOS malware campaign works

In early 2019, Google’s Threats Analysis Group (TAG) notified Apple about 14 vulnerabilities affecting iPhone devices from versions iOS 10 to iOS 12. This vulnerabilities was patched on out-of-band...

References:

googleprojectzero.blogspot.com

support.apple.com

forbes.com

unaaldia.hispasec.com

Tags:

WhatsApp fixes a security issue in video calls

Natalie Silvanovich, security researcher at Google Project Zero, found a vulnerability in August 2018, reported later to WhatsApp, that could compromise an account by simply responding to a video...

References:

twitter.com

cnbc.com

thehackernews.com

nakedsecurity.sophos.com

bleepingcomputer.com

unaaldia.hispasec.com

Tags:

Trend Micro Apps are removed from the App Store for collecting data

Apple has been forced to remove several applications from its Mac App Store from Trend Micro security provider, because they collected data from their users without their consent. Among the...

References:

blog.trendmicro.com

blog.malwarebytes.com

cyberscoop.com

thehackernews.com

searchsecurity.techtarget.com

ciberseguridadlatam.com

genbeta.com

Tags:

Apple

Cyberespionage

Information leakage

A 16-year-old young accused of stealing 90GB of data from Apple's servers

A 16-year-old Australian teenager managed to get into Apple's servers and download approximately 90GB of data, although the company has assured in a statement that the data of its customers have...

References:

nakedsecurity.sophos.com

thehackernews.com

reuters.com

xataka.com

Tags:

Apple

Information leakage

Discovered a bug in macOS High Sierra

Patrick Wardle, a former US NSA employee, discovered an error in macOS High Sierra by which an attacker could access to password protected areas.MacOS has a system to avoid the unwanted loading of...

References:

threatpost.com

genbeta.com

hotforsecurity.bitdefender.com

Tags:

0day

Apple

Vulnerability

A virus closes several factories of TSMC, one of the manufacturers of iPhone

Taiwan Semiconductor Manufacturing Company (TSMC), one of the largest manufacturers semiconductors and processor in the world, was recently forced to close several factories during the weekend,...

References:

bloomberg.com

thehackernews.com

blog.segu-info.com.ar

applesfera.com

xataka.com

Tags:

Apple

Incident

Malware

Corporate access

Cybersecurity Highlights

API requests not authenticated by mobile device monitoring services

Quanta Computer, victim of REvil ransomware threatening Apple

Unauthorized access to a Nitro database

FCM keys expose millions of users to spam and phishing

Google reveals how an iOS malware campaign works

WhatsApp fixes a security issue in video calls

Trend Micro Apps are removed from the App Store for collecting data

A 16-year-old young accused of stealing 90GB of data from Apple's servers

Discovered a bug in macOS High Sierra

A virus closes several factories of TSMC, one of the manufacturers of iPhone

Pages