Connect with us

News

New Malware Could Mean Trouble For iOS & macOS Security

Security researchers discovered an attack vector that, if exploited, would allow hackers to access messages, photos, and more.

Published

on

new malware could mean trouble for ios and macos security
Unsplash

Although Apple’s products are renowned for their robust security, no company is completely immune to hackers and malware. New research has recently revealed an attack vector that can affect Apple’s iPhone and Mac operating systems, allowing criminals to sweep messages, photos, and call history for exploitable data and — even more worryingly — access location data, photos, and the main camera.

The research comes from security firm Trellix, which says that the security flaws rank as “medium to high severity” and bypass the protections Apple puts in place to protect its users.

“The key thing here is the vulnerabilities break Apple’s security model at a fundamental level,” notes Doug McKee, director of vulnerability research at Trellix. McKee thinks his company’s findings could potentially lead to similar bugs being uncovered. However, it’s important to point out that Apple has so far plugged all of the security holes found by Trellix, and there’s no evidence they were ever exploited.

Trellix’s findings build on previous work by Google and Citizen Lab, who jointly discovered malware known as “ForcedEntry”, a zero-click, zero-day iOS exploit linked to Israeli spyware maker NSO Group and found initially on the iPhone of a Saudi activist.

Also Read: Facebook & Instagram Are Testing Twitter-Style Blue Checks

Analysis of ForcedEntry showed that it worked by fooling an iPhone into opening a malicious PDF disguised as a GIF, ultimately bypassing Apple’s sandbox — a protocol that keeps apps from accessing the data stored by other programs and areas of the device.

While Trellix’s findings are worrisome, it’s important to remember that attackers would need to gain a foothold into a device before being able to install any malware, and Apple has been very efficient at issuing security updates. The initial findings relate to macOS 13.2 and iOS 16.3, which were released in January, so it’s vital that readers ensure their devices are fully up to date!

Advertisement

📢 Get Exclusive Monthly Articles, Updates & Tech Tips Right In Your Inbox!

JOIN 21K+ SUBSCRIBERS

Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

News

“AI Seal” Certification Now Required For Dubai Gov Partnerships

The new mandatory certification is designed to build trust in AI companies and create a reliable network of providers for government and public collaboration.

Published

on

ai seal certification now required for dubai gov partnerships
Dubai Media Office

Dubai has introduced the Dubai AI Seal, a certification designed to establish trust in artificial intelligence (AI) companies and solutions. This initiative, directed by Sheikh Hamdan bin Mohammed bin Rashid Al Maktoum, Crown Prince of Dubai and Deputy Prime Minister, aims to create a reliable network of AI providers which government entities and businesses can collaborate confidently.

Companies must now obtain the AI Seal to qualify for UAE or Dubai government contracts. The Dubai Centre for Artificial Intelligence (DCAI), which developed the certification, sees it as a competitive edge for companies looking to participate in key national projects. Once certified, businesses will be permitted to showcase the seal across their websites and marketing materials, signaling their credibility and dependability.

The evaluation process will consider six main criteria: the company’s services and operations, the number of employees specializing in AI, ongoing and future projects, as well as existing partnerships with public and private sector entities.

dubai ai seal certification

Khalfan Belhoul, CEO of the Dubai Future Foundation, which oversees the DCAI, commented on the initiative’s potential: “This initiative will help create powerful partnerships between the public and private sectors, locally, regionally, and globally. It will help drive new economic opportunities by leveraging AI to serve better the economy, society, and the future we aspire to”.

Also Read: Top Free AI Chatbots Available In The Middle East

The Dubai AI Seal’s goals include providing a clear framework for verifying AI providers, fostering business opportunities for AI companies, and acknowledging the industry’s strategic importance to Dubai’s economy. The initiative emphasizes AI’s role in driving economic growth, creating jobs, and strengthening collaboration between government bodies and technology firms.

All technology companies operating in Dubai and offering AI-related services or products are eligible to apply for the certification at no cost through the official website.

Continue Reading

#Trending