iOS

Research from Citizen Lab has uncovered a sophisticated campaign where targeted ads were used to deploy zero-click mercenary malware. The operation leveraged the trust of verified ad vendors to reach sensitive targets in government and national security sectors.

The discussion explores the shift from software-only security to hardware-anchored memory safety. It highlights how technologies like CHERI can protect legacy C/C++ codebases without requiring massive rewrites.

Apple has ceased offering Advanced Data Protection to new iCloud users in the UK following a secret government order to ensure data accessibility. This move avoids the creation of a cryptographic backdoor but leaves UK users with a lower tier of encryption than their international counterparts.

Apple has transitioned to a more frequent security patching cadence to mitigate the risks posed by AI-driven cyberattacks. While this reduces the window for exploitation, experts warn that user behavior and the lack of advanced endpoint security frameworks on mobile remain significant vulnerabilities.

Security researchers have identified a new unpatchable bootROM exploit named usbliter8 that affects several older Apple devices. The vulnerability stems from how USB controllers manage data packets, allowing for persistent hardware-level exploits.