Yet more digital spies targeting iPhones exposed by security researchers

Just weeks after President Biden signed an executive order designed to prevent the US government from purchasing commercial spyware used to subvert democracies, researchers have identified yet another shameful zero-click, zero-day exploit that targeted iPhone users. This spy-for-hire ‘solution’ was sold by an Israeli firm called QuaDream.

Making everyone less safe

QuaDream’s attacks have been exposed by security researchers at Microsoft and Citizen Lab. QuaDream is a more secretive entity than NSO Group but shares much of the same pedigree, including being founded by ex-NSO Group employees and having connections to Israeli intelligence. Its attacks were first exposed last year, but the researchers have since found more about how these digital mercenaries worked.

To read this article in full, please click here

Read more

Russia’s iPhone ban and the digital supply chain

Read more

Why you should use Apple’s Rapid Security Response

Mac, iPad, and iPhone users can choose to automatically install system security patches as they are released with a new Apple feature called Rapid Security Response.

Rapid Security Response aims to secure Apple’s platforms with automated security updates. The idea is that if every user automatically installs such patches, the entire ecosystem becomes inherently more secure.

Announced last year at WWDC 2022, Apple began testing the feature in October. During beta testing, it shared four content-free downloads to test its distribution system, including one recent test in March. While the feature can be enabled on devices running the latest operating system, as of this month Apple had not yet begun to ship genuine security patches.

To read this article in full, please click here

Read more

Apple’s MFi scheme for USB-C is a good thing

Apple appears poised to make it more difficult to use cheap USB-C cables with its devices, and while it may well make a few dollars more from the purported plan, there are also good reasons to put the system in place.

Apple got to make a dollar or two

The claim is that Apple plans to replace Lightning ports and cables with USB-C in the iPhone 15, and when it does it will introduce a Made For iPhone (MFi) scheme for such products.  The idea is that consumers will be able to purchase cables and other devices in full confidence that they will be compatible with their iPhone.

To read this article in full, please click here

Read more

iPhone calendar spam: What it is, and how to remove it

Categories: Awareness

Categories: News

Categories: Scams

Tags: iPhone

Tags: calendar

Tags: spam

Tags: iOS

Tags: mobile

Tags: device

Tags: ad

Tags: advert

Tags: popup

Tags: permission

Tags: remove

Tags: notification

Tags: Apple

Is your iPhone claiming that you’ve been hacked, your phone isn’t protected, or that viruses have damaged it? It could be calendar spam.

(Read more…)

The post iPhone calendar spam: What it is, and how to remove it appeared first on Malwarebytes Labs.

Read more

A week in security (January 23—29)

Categories: News

Tags: T-Mobile

Tags: ransomware

Tags: Microsoft

Tags: TikTok

Tags: privacy

Tags: Data Privacy Day 2023

Tags: Data Privacy Week 2023

Tags: Malwarebytes 2023 State of Mobile Cybersecurity

Tags: Riot Games

Tags: VASTFLUX

Tags: Grand Theft Auto 5

Tags: iPhone

Tags: vRealize

Tags: video game fish

Tags: credit cart theft

Tags: DuoLingo

Tags: K-12

Tags: Vice Society

Tags: Hive ransomware

The most interesting security related news from the week of January 23-19.

(Read more…)

The post A week in security (January 23—29) appeared first on Malwarebytes Labs.

Read more

Apple marks Data Privacy Week with in-store privacy training, more

Read more