3 ms·
> Apple is aware of a report that this issue may have been actively exploited. > CVE-2023-41061: Apple So if Apple discovered this bug, and Apple saw it explo
by londons_explore 3y ago
> Apple is aware of a report that this issue may have been actively exploited.
> CVE-2023-41061: Apple
So if Apple discovered this bug, and Apple saw it exploited in the wild, the question needs to be asked... How did Apple find it in the wild? Was one of their own employees phished? Do they have monitoring on every phone to upload suspicious binaries running as root to the mothership?
- slama 3y ago> Last week, while checking the device of an individual employed by a Washington DC-based civil society organization with international offices, Citizen Lab found an actively exploited zero-click vulnerability being used to deliver NSO Group’s Pegasus mercenary spyware. https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zero-click-zero-day-exploit-captured-in-the-wild/ https://citizenlab.ca/2023/09/blastpass-nso-group-iphone-zer...
- tough 3y agoGood ol pegasus they keep being on the news about spyware
- deleted 3y ago[deleted]
- ronsor 3y agoiOS can send diagnostic logs and crash reports. If the exploit crashed the app instead of running successfully, then that would likely appear in the report. Unusual stack traces can indicate RCE or other exploits.
- s3p 3y agoI'm not sure who needs to ask that question. Apple gets critical vulnerability reports and investigates them.
- londons_explore 3y agoBut normally they wouldn't attribute themselves if the initial report was from an external source.
- hulitu 3y agoDepends on the source. If the Citizen lab didn't find it, Apple would have not patched it.
- acdha 3y agoiMessage passes through their servers so I would not be surprised if they look for anomalous senders or whatever other metadata isn’t encrypted, and they can correlate that with things like crash dumps or potentially other unusual activity by the recipient.