CyberAlerts

APPLE-SA-01-27-2025-6 macOS Ventura 13.7.3

Description: Posted by Apple Product Security via Fulldisclosure on Jan 27APPLE-SA-01-27-2025-6 macOS Ventura 13.7.3 macOS Ventura 13.7.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/122070. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AppleMobileFileIntegrity Available for: macOS Ventura Impact: An app may be able to access sensitive user data...

Source: Full Disclosure Mailinglist

January 28th, 2025 (5 months ago)

APPLE-SA-01-27-2025-7 watchOS 11.3

Description: Posted by Apple Product Security via Fulldisclosure on Jan 27APPLE-SA-01-27-2025-7 watchOS 11.3 watchOS 11.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/122071. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AirPlay Available for: Apple Watch Series 6 and later Impact: An attacker on the local network may be able to cause unexpected system...

Source: Full Disclosure Mailinglist

January 28th, 2025 (5 months ago)

APPLE-SA-01-27-2025-8 tvOS 18.3

Description: Posted by Apple Product Security via Fulldisclosure on Jan 27APPLE-SA-01-27-2025-8 tvOS 18.3 tvOS 18.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/122072. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AirPlay Available for: Apple TV HD and Apple TV 4K (all models) Impact: An attacker on the local network may be able to cause unexpected...

Source: Full Disclosure Mailinglist

January 28th, 2025 (5 months ago)

APPLE-SA-01-27-2025-9 Safari 18.3

Description: Posted by Apple Product Security via Fulldisclosure on Jan 27APPLE-SA-01-27-2025-9 Safari 18.3 Safari 18.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/122074. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Passwords Available for: macOS Ventura and macOS Sonoma Impact: A malicious app may be able to bypass browser extension authentication...

Source: Full Disclosure Mailinglist

January 28th, 2025 (5 months ago)

PowerSchool Notifies Students and Educators of Major Data Breach

Description: PowerSchool has begun notifying impacted individuals about a data breach that compromised personal information from its Student Information System (SIS). The breach, first detected on December 28, 2024, resulted in the unauthorized exfiltration of data, including names, contact details, Social Security numbers (SSNs), medical alerts, and academic records for certain individuals. The total number of … The post PowerSchool Notifies Students and Educators of Major Data Breach appeared first on CyberInsider.

Source: CyberInsider

January 28th, 2025 (5 months ago)

HeatGames - 647,896 breached accounts

Description: In June 2021, the (now defunct) gaming website HeatGames suffered a data breach that was later redistributed as part of a larger corpus of data. The breach exposed almost 650k unique email addresses along with IP addresses, country and salted MD5 password hashes.

Source: HaveIBeenPwnedLatestBreaches

January 28th, 2025 (5 months ago)

Eradicating trivial vulnerabilities, at scale

Description: A new NCSC research paper aims to reduce the presence of ‘unforgivable’ vulnerabilities.

Source: NCSC Alerts and Advisories

January 28th, 2025 (5 months ago)

A method to assess 'forgivable' vs 'unforgivable' vulnerabilities

Description: Research from the NCSC designed to eradicate vulnerability classes and make the top-level mitigations easier to implement.

Source: NCSC Alerts and Advisories

January 28th, 2025 (5 months ago)

Signal Adds Encrypting Message History Sync for Linked Devices

Description: Signal is rolling out a new feature that allows users to transfer their message history when linking their primary device to a new desktop or iPad. Previously, only new messages would sync to linked devices, but now users can bring their chats and up to 45 days of media along with them — all while … The post Signal Adds Encrypting Message History Sync for Linked Devices appeared first on CyberInsider.

Source: CyberInsider

January 28th, 2025 (5 months ago)

Apple plugs security hole in its iThings that's already been exploited in iOS

Source: TheRegister

January 28th, 2025 (5 months ago)

Threat and Vulnerability Intelligence Database

Example Searches:

	APPLE-SA-01-27-2025-6 macOS Ventura 13.7.3 Description: Posted by Apple Product Security via Fulldisclosure on Jan 27APPLE-SA-01-27-2025-6 macOS Ventura 13.7.3 macOS Ventura 13.7.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/122070. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AppleMobileFileIntegrity Available for: macOS Ventura Impact: An app may be able to access sensitive user data... Source: Full Disclosure Mailinglist January 28th, 2025 (5 months ago)
	APPLE-SA-01-27-2025-7 watchOS 11.3 Description: Posted by Apple Product Security via Fulldisclosure on Jan 27APPLE-SA-01-27-2025-7 watchOS 11.3 watchOS 11.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/122071. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AirPlay Available for: Apple Watch Series 6 and later Impact: An attacker on the local network may be able to cause unexpected system... Source: Full Disclosure Mailinglist January 28th, 2025 (5 months ago)
	APPLE-SA-01-27-2025-8 tvOS 18.3 Description: Posted by Apple Product Security via Fulldisclosure on Jan 27APPLE-SA-01-27-2025-8 tvOS 18.3 tvOS 18.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/122072. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. AirPlay Available for: Apple TV HD and Apple TV 4K (all models) Impact: An attacker on the local network may be able to cause unexpected... Source: Full Disclosure Mailinglist January 28th, 2025 (5 months ago)
	APPLE-SA-01-27-2025-9 Safari 18.3 Description: Posted by Apple Product Security via Fulldisclosure on Jan 27APPLE-SA-01-27-2025-9 Safari 18.3 Safari 18.3 addresses the following issues. Information about the security content is also available at https://support.apple.com/122074. Apple maintains a Security Releases page at https://support.apple.com/100100 which lists recent software updates with security advisories. Passwords Available for: macOS Ventura and macOS Sonoma Impact: A malicious app may be able to bypass browser extension authentication... Source: Full Disclosure Mailinglist January 28th, 2025 (5 months ago)
	PowerSchool Notifies Students and Educators of Major Data Breach Description: PowerSchool has begun notifying impacted individuals about a data breach that compromised personal information from its Student Information System (SIS). The breach, first detected on December 28, 2024, resulted in the unauthorized exfiltration of data, including names, contact details, Social Security numbers (SSNs), medical alerts, and academic records for certain individuals. The total number of … The post PowerSchool Notifies Students and Educators of Major Data Breach appeared first on CyberInsider. Source: CyberInsider January 28th, 2025 (5 months ago)
	HeatGames - 647,896 breached accounts Description: In June 2021, the (now defunct) gaming website HeatGames suffered a data breach that was later redistributed as part of a larger corpus of data. The breach exposed almost 650k unique email addresses along with IP addresses, country and salted MD5 password hashes. Source: HaveIBeenPwnedLatestBreaches January 28th, 2025 (5 months ago)
	Eradicating trivial vulnerabilities, at scale Description: A new NCSC research paper aims to reduce the presence of ‘unforgivable’ vulnerabilities. Source: NCSC Alerts and Advisories January 28th, 2025 (5 months ago)
	A method to assess 'forgivable' vs 'unforgivable' vulnerabilities Description: Research from the NCSC designed to eradicate vulnerability classes and make the top-level mitigations easier to implement. Source: NCSC Alerts and Advisories January 28th, 2025 (5 months ago)
	Signal Adds Encrypting Message History Sync for Linked Devices Description: Signal is rolling out a new feature that allows users to transfer their message history when linking their primary device to a new desktop or iPad. Previously, only new messages would sync to linked devices, but now users can bring their chats and up to 45 days of media along with them — all while … The post Signal Adds Encrypting Message History Sync for Linked Devices appeared first on CyberInsider. Source: CyberInsider January 28th, 2025 (5 months ago)
	Apple plugs security hole in its iThings that's already been exploited in iOS Source: TheRegister January 28th, 2025 (5 months ago)