CommunityNews

CommunityNews

Frustrated dev drops three zero-day vulns affecting Apple iOS 15

Upset with Apple’s handling of its Security Bounty program, a bug researcher has released proof-of-concept exploit code for three zero-day vulnerabilities in Apple’s newly released iOS 15 mobile operating system.

The bug hunter, posting on Thursday to Russia-based IT blog Habr under the name IllusionOfChaos and to Twitter under the same moniker, expressed frustration with Apple’s handling of vulnerability reports.

“I’ve reported four 0-day vulnerabilities this year between March 10 and May 4, as of now three of them are still present in the latest iOS version (15.0) and one was fixed in 14.7, but Apple decided to cover it up and not list it on the security content page,” the researcher wrote.

“When I confronted them, they apologized, assured me it happened due to a processing issue and promised to list it on the security content page of the next update. There were three releases since then and they broke their promise each time.”

Read in full here:

This thread was posted by one of our members via one of our news source trackers.

Most Liked

OvermindDL1

OvermindDL1

Saw this in the news, apple really really screwed up…

Where Next?

Popular Macos topics Top

New
First poster: bot
Users with the know-how will be able to order and replace iPhone screens and parts.
New
CommunityNews
Never-before-seen, cross-platform SysJoker came from an “advanced threat actor.”
New
First poster: AstonJ
The new feature will be available in the autumn and comes after its devices were successfully targeted.
New
First poster: bot
Steve Jobs negotiates Apple’s deal with Microsoft. Greg, Here is a review of the terms we last discussed, as well as some issues I have ...
New
First poster: bot
GitHub - koekeishiya/yabai: A tiling window manager for macOS based on binary space partitioning. A tiling window manager for macOS base...
New
First poster: bot
Apple builds new ad empire after kneecapping competitors. The tech giant is ramping up an ad business just as its iPhone privacy policy ...
New
First poster: DevotionGeo
The new Mac Pro chip could double or quadruple the power of the M2 Max. Apple’s expected to launch the new Mac Pro next year.
New
CommunityNews
It only took 50 years, but there’s finally a replacement that’s safer and easier to use.
New
CommunityNews
A simple alternative to homebrew for installing binary packages on MacOS written in Go. - crhuber/kelp
New

Other popular topics Top

Devtalk
Hello Devtalk World! Please let us know a little about who you are and where you’re from :nerd_face:
New
dasdom
No chair. I have a standing desk. This post was split into a dedicated thread from our thread about chairs :slight_smile:
New
dimitarvp
Small essay with thoughts on macOS vs. Linux: I know @Exadra37 is just waiting around the corner to scream at me “I TOLD YOU SO!!!” but I...
New
PragmaticBookshelf
Create efficient, elegant software tests in pytest, Python's most powerful testing framework. Brian Okken @brianokken Edited by Kat...
New
PragmaticBookshelf
Build efficient applications that exploit the unique benefits of a pure functional language, learning from an engineer who uses Haskell t...
New
AstonJ
Was just curious to see if any were around, found this one: I got 51/100: Not sure if it was meant to buy I am sure at times the b...
New
DevotionGeo
I have always used antique keyboards like Cherry MX 1800 or Cherry MX 8100 and almost always have modified the switches in some way, like...
New
New
New
AnfaengerAlex
Hello, I’m a beginner in Android development and I’m facing an issue with my project setup. In my build.gradle.kts file, I have the foll...
New