DarkSword iOS Exploit Kit: 3 Lessons for Mobile Security
Jamf Threat Labs analyzes leaked source code of a Safari exploitation kit (DarkSword) and the impact of this disclosure on the mobile ecosystem.
1 août
1459 articles
Jamf Threat Labs analyzes leaked source code of a Safari exploitation kit (DarkSword) and the impact of this disclosure on the mobile ecosystem.
The firmware on M4 and M5 Macs supports USB 3 speeds during DFU restores! This will make a huge difference for restoring multiple Mac systems at the same time.
Apple silently introduced the com.apple.macl extended attribute in macOS Catalina
Apple is going to be enforcing stricter controls on Transport Layer Security (TLS) connections.
Starting as early as the next major OS release, Apple devices will refuse to connect to any device management service, Mobile Device Management (MDM) server, enrollment endpoint, or app distribution infrastructure that does not meet tightened TLS standards.
Chris Dawe, Mac Admins Foundation: We look forward to honoring Anthony’s contributions to a grateful community, and encourage all who can attend to do so, virtually or in Calgary. Anthony is the editor of many of my books, which is quite the task, considering they are not written in my first language. He is also always so generous with advice and friendship.
Apple is still extraordinarily good at making hardware I want to pick up and use, and still more coherent than most of the industry in the broad strokes, but it also feels increasingly prone to sanding off the wrong edges, reinventing the UX wheel, and constantly adding paper cuts to their software.
Apple’s app-vetting procedures are in the spotlight this week, as not one but two news stories demonstrate the grave consequences of what appears to be a troublingly lackadaisical approach at the Cupertino-based company.
After spending time with the latest Apple Business, my first reaction is that Apple is building a more complete business platform — one that brings identity, services, communications, support, storage, and payments closer together under a single administrative surface.
With the new service came a number of changes, including a change to how you could sign up for Apple Business and verify your business.
The threat of losing your photos is a powerful lure, so scammers are now using it to steal personal and financial details.
You passed the exam. You earned the Credly badge. But where’s your Apple certification certificate?
This might be a convoluted way to do this, since dockutil has an --allhomes option, but I like using docklib,
To help identify if and where Intel-based applications have been installed on Apple Silicon Macs
A better approach for managed environments is to deploy the certificates as a .mobileconfig profile via MDM.
The hosts revisit early Apple and Mac experiences and discuss first keyboard shortcuts, focusing on “Command Control Power” after a photographer client referenced it while troubleshooting a MacBook Pro that died on location from a drained battery.
Joshua Patrick joins the show to talk about his new app: PocketMDM.
Capable browsers, and the PWAs they support, hold the power to grow an ecosystem of applications that no gatekeeper can own or tax, based on standardised APIs that resist enclosure. Apple goes to extreme lengths to prevent the emergence of browser engine choice to obstruct the app store's most credible disruptor.
Apple, would it kill you to acknowledge what the bug affected in the release notes? Something like, “Fixes an issue where data synced by iCloud may not appear immediately.”
Jamf Threat Labs discovered a ClickFix-style macOS attack that abuses the applescript:// URL scheme to launch Script Editor and deliver an Atomic Stealer infostealer payload — bypassing Terminal entirely.
it seems that most people don’t need to worry about it
Interesting idea to expose Apple's built-in Foundation AI model through a command line tool.
iOS security is an important topic that we don’t talk about nearly enough. The current moment is driving a lot of people to understand it better, though!
The hosts celebrate Apple’s 50th anniversary (recorded April 1) and recommend David Pogue’s book “Apple at 50,” including his Computer History Museum interview.