科技回声

<pre><code> Because we at SektionEins believe keeping the public in the dark about details of already fixed vulnerabilities is wrong... ...use our private jailbreak... </code></pre> i.e. your undisclosed vulnerabilities bad, my undisclosed vulnerabilities are cool.Useful analysis, but casting a marketing endeavor as a public service is rather disingenuous.

Once again demonstrating that the term "zero day" is horribly overused and misused and probably should be eliminated from the lexicon, the OSUnserializeBinary bug doesn't appear to be new. Brandon Azad[1] says he discovered it last year. It was fixed in OS X in May. Or maybe the fix didn't work since they had to make another patch this week.[1] <a href="https://bazad.github.io/2016/05/mac-os-x-use-after-free/" rel="nofollow">https://bazad.github.io/2016/05/mac-os-x-use-after-free/</a>

Did these guys just admit they have their own private jailbreak? That seems like something you'd keep quiet

Apple also released a fix for OS X with its latest update.<a href="https://support.apple.com/en-us/HT207130" rel="nofollow">https://support.apple.com/en-us/HT207130</a>

Realistically, is this in the wild under active exploit? With the likelihood of infection remote unless one is a UAE-targeted activist?

Are people who never install new apps on their Mac safe without updating for now, or can this be exploited over the web?

Did these guys just admit they have their own private jailbreak? That seems like something you'd keep quiet

Apple also released a fix for OS X with its latest update.<a href="https://support.apple.com/en-us/HT207130" rel="nofollow">https://support.apple.com/en-us/HT207130</a>

Realistically, is this in the wild under active exploit? With the likelihood of infection remote unless one is a UAE-targeted activist?

Are people who never install new apps on their Mac safe without updating for now, or can this be exploited over the web?

PEGASUS iOS Kernel Vulnerability Explained

6 条评论

PEGASUS iOS Kernel Vulnerability Explained

6 条评论