iOS 14.5 to Make Zero-Click Attacks 'Significantly Harder'
Apple's impending iOS and iPadOS 14.5 update will make zero-click attacks considerably more difficult by extending PAC security provisions, according to Motherboard.
Apple has made a change to the way in which it secures its code in the latest betas of iOS 14.5 and iPadOS 14.5 to make zero-click attacks much harder. The change, spotted by security researchers, has now been confirmed by Apple and is slated to be included in the final update.
Zero-click attacks allow hackers to break into a target without the need for victim interaction, such as clicking a malicious phishing link. Zero-click attacks are therefore considerably harder for targeted users to detect and are considered to be much more sophisticated.
Since 2018, Apple has used Pointer Authentication Codes (PAC) to prevent attackers from leveraging corrupted memory to inject malicious code. Cryptography is applied to authenticate pointers and validate them before they are used. ISA pointers instruct a program about what code it should use when it runs on iOS. By using cryptography to sign these pointers, Apple is now extending PAC protection to ISA pointers.
"Nowadays, since the pointer is signed, it is harder to corrupt these pointers to manipulate objects in the system. These objects were used mostly in sandbox escapes and zero-clicks," security firm Zimperium's Adam Donenfeld told Motherboard. The change will "definitely make zero-clicks harder. Sandbox escapes too. Significantly harder." Sandboxes aim to isolate applications from each other to stop code from a program interacting with the wider operating system.
While zero-clicks will not be eradicated through this change, many of the exploits used by hackers and governmental organizations will now be "irretrievably lost." Hackers will now need to find new techniques to implement zero-click attacks on iPhone and iPad, but the security improvements to ISA pointers are likely to make a significant impact on the overall number of attacks on these devices.
Popular Stories
The first benchmark results for the standard M3 chip surfaced in the Geekbench 6 database today, providing a closer look at the chip's CPU performance improvements. Based on the results so far, the M3 chip has single-core and multi-core scores of around 3,000 and 11,700, respectively. The standard M2 chip has single-core and multi-core scores of around 2,600 and 9,700, respectively, so the...
Apple appears to be internally testing an iOS 17.1.1 update for the iPhone, based on evidence of the software in our website's analytics logs this week. iOS 17.1.1 will almost certainly be focused on bug fixes, but it's unclear exactly which issues the update will address. The update could include the same fix for Wi-Fi connectivity issues that Apple rolled out in the first iOS 17.2 beta,...
Apple's latest M3 Pro chip in the new 14-inch and 16-inch MacBook Pro has 25% less memory bandwidth than the M1 Pro and M2 Pro chips used in equivalent models from the two previous generations. Based on the latest 3-nanometer technology and featuring all-new GPU architecture, the M3 series of chips is said to represent the fastest and most power-efficient evolution of Apple silicon thus far. ...
Apple today released a new firmware update designed for the AirTag item trackers. The firmware features a build number of 2A61, up from the 2A36 firmware that came out last December. It has been nearly a year since Apple updated the firmware on the AirTags, and there is no word yet on what might be included in the update. Today's firmware release will be rolling out on a staggered basis....
The first benchmark results for Apple's M3 Max chip surfaced in the Geekbench 6 database today, providing a look at CPU performance. Based on the "Mac15,9" model identifier shown, the results appear to be for the new 16-inch MacBook Pro. The highest multi-core score for the M3 Max with a 16-core CPU is currently 21,084 as of writing. If this early result is accurate, this means the M3 Max is ...
Apple made the first beta of iOS 17.2 available to developers and public beta testers last week, and the software update includes many new features and changes for iPhones. Below, we have highlighted 10 of these new features and changes. iOS 17.2 is expected to be released to the public in December. Once available, the update can be installed in the Settings app under General → Software...
Macs equipped with the standard M3 chip still support only one external display with up to 6K resolution at 60Hz, according to Apple's tech specs. So far, the chip is available in the entry-level 14-inch MacBook Pro and the 24-inch iMac. This limitation has existed since the first Apple silicon Macs with the M1 chip were released in 2020, but users can connect multiple external displays to...
The lower-cost Apple Music Voice Plan is being discontinued this month in the U.S. and all other countries where it was available, according to an Apple support document. Brazilian website MacMagazine was first to alert us to this news. "Beginning in November, Apple will discontinue the Apple Music Voice plan," said Apple. "We are focused on delivering the best, most robust music experience...
Top Rated Comments