Apple at WWDC this week announced its latest privacy and security innovations, including major updates to Safari Private Browsing, Communication Safety, and Lockdown Mode, as well as app privacy improvements. Additionally, Apple introduced new features designed with privacy and security at their core, including Check In, NameDrop, and Live Voicemail. These new efforts are the latest manifestation of Apple’s deeply held belief that privacy is a fundamental human right and that good privacy is built on a foundation of strong security. “Privacy is designed into every new Apple product and feature from the beginning,” said Craig Federighi, Apple’s senior vice president of Software Engineering, in a statement. “We are focused on keeping our users in the driver’s seat when it…

Antivirus provider Kaspersky has discovered a malware campaign targeting iPhones running up to iOS 15.7 via iMessage. Importantly, this zero-click/tap malware can be found and blocked. Kaspersky: ince it is impossible to inspect modern iOS devices from the inside, we created offline backups of the devices in question, inspected them using the Mobile Verification Toolkit’s mvt-ios and discovered traces of compromise. We are calling this campaign “Operation Triangulation”, and all the related information we have on it will be collected on the Operation Triangulation page. This allowed [us] to move the research forward, and to reconstruct the general infection sequence: • The target iOS device receives a message via the iMessage service, with an attachment containing an exploit. • Without any user…

Macworld Digital security firm Kaspersky has posted information about a recent cyberattack that targeted the iPhones of Kaspersky employees, which were infected with spyware that is part of a campaign the company dubbed, “Operation Triangulation.” Hackers were able to infect the iPhones using what Kaspersky called an “invisible iMessage with a malicious attachment” that can be activated without user interaction. Once installed, Triangulation was able to gather sensitive information (audio recordings, photos, geolocation, and more) and transmit that data to remote servers. All of this can occur without the user being able to notice. In a separate, more technical post, Kaspersky points out that “the most recent version of the devices successfully targeted is iOS 15.7.” An Apple representative told…

Apple on Thursday denied claims made by Russia’s Federal Security Service (FSB) that it cooperated with the U.S. National Security Agency to surveil Russian iPhone users. iPhone 14 Pro Max In a statement to media, the company said it has “never worked with any government to insert a backdoor into any apple product and never will.” MacDailyNews Take: As we wrote earlier, if anything screams “ironclad trust,” it’s Russian government information. See also: Apple halts all product sales in Russia – March 1, 2022 Last July, Apple introduced a groundbreaking security capability – Lockdown Mode – that offers specialized additional protection to users who may be at risk of highly targeted cyberattacks from private companies developing state-sponsored mercenary spyware. Apple…

Antivirus provider Kaspersky has discovered a malware campaign explicitly aimed at infecting iPhones running up to iOS 15.7 through iMessage — but it can be found and prevented.iOS devices have been specifically targeted with malwareKaspersky's team identified potentially suspicious behavior emanating from multiple iOS devices. However, due to the security limitations that restrict direct internal examination of iOS devices, the company had to generate offline backups. Read more...

Antivirus provider Kaspersky has discovered a malware campaign explicitly aimed at infecting iPhones running up to iOS 15.7 through iMessage — but it can be found and prevented.iOS devices have been specifically targeted with malwareKaspersky's team identified potentially suspicious behavior emanating from multiple iOS devices. However, due to the security limitations that restrict direct internal examination of iOS devices, the company had to generate offline backups. Read more...