Security · High impactFan score 69 · Tier A3 sources
Hackers use n-day exploits in zero-click attacks on iOS, Android devices
BleepingComputer · By Bill Toulas ·
A large-scale watering hole attack associated with Russian hackers has been targeting iOS and Android users visiting compromised sites or fake ones impersonating legitimate portals. [...]
The Brief
- A large-scale watering hole attack associated with Russian hackers targets iOS and Android users visiting compromised or fake sites.
- Attackers exploit previously patched iOS and Android flaws, so unpatched devices remain vulnerable.
- CISA added a medium-severity flaw affecting multiple Apple operating systems to its Known Exploited Vulnerabilities catalog after reports of active exploitation.
Why it matters
Patched flaws are still being used against unpatched phones, so developers and their teams need to keep mobile devices updated, including test and admin devices.
Who’s affected
- iOS users
- Android users
- Developers and teams with unpatched iPhones or Android devices
What to do
- Update iOS and Android devices to the patched versions that fix the flaws
- #security
- #ios
- #android
- #malware
- #exploit
- #watering-hole
Timeline
Researchers report the watering hole attacks exploiting patched iOS and Android flaws
CISA adds the medium-severity Apple flaw to its Known Exploited Vulnerabilities catalog
BleepingComputer
Hackers use n-day exploits in zero-click attacks on iOS, Android devices
Biz & IT - Ars Technica
Hackers exploited iOS and Android flaws to infect phones
The Hacker News
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
Full coverage · 3 sources
- 1d ago ↗
- 2d ago ↗
Biz & IT - Ars Technica
Hackers exploited iOS and Android flaws to infect phones - 2d ago ↗
BleepingComputer
Hackers use n-day exploits in zero-click attacks on iOS, Android devices
