Security · High impactFan score 69 · Tier A3 sources
Hackers exploited iOS and Android flaws to infect phones
Biz & IT - Ars Technica · By Dan Goodin ·
Hackers possibly linked to the Kremlin exploited previously patched iOS and Android flaws in an attempt to hack visitors of multiple websites, including one celebrating the 250th anniversary of American independence, researchers said Wednesday. The attackers, which the…
The Brief
- A large-scale watering hole attack associated with Russian hackers targets iOS and Android users visiting compromised or fake sites.
- Attackers exploit previously patched iOS and Android flaws, so unpatched devices remain vulnerable.
- CISA added a medium-severity flaw affecting multiple Apple operating systems to its Known Exploited Vulnerabilities catalog after reports of active exploitation.
Why it matters
Patched flaws are still being used against unpatched phones, so developers and their teams need to keep mobile devices updated, including test and admin devices.
Who’s affected
- iOS users
- Android users
- Developers and teams with unpatched iPhones or Android devices
What to do
- Update iOS and Android devices to the patched versions that fix the flaws
- #security
- #ios
- #android
- #malware
- #exploit
- #watering-hole
Timeline
Researchers report the watering hole attacks exploiting patched iOS and Android flaws
CISA adds the medium-severity Apple flaw to its Known Exploited Vulnerabilities catalog
BleepingComputer
Hackers use n-day exploits in zero-click attacks on iOS, Android devices
Biz & IT - Ars Technica
Hackers exploited iOS and Android flaws to infect phones
The Hacker News
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
