Forwarded from Pegasus NSO & other spyware
Triangulation: Did “the NSA” fail to learn the lessons of NSO? | by Bill Marczak | Jun, 2023 | Medium – June 2023
#NSA #Apple #Pegasus #NSO
The 1st of June 2023 saw perhaps the most exciting development in the targeted spyware research space in recent memory.
The Russian government’s Federal Security Service (FSB) released a statement indicating that they had detected a hacking campaign by the US National Security Agency (NSA) that compromised “thousands” of Apple iPhones within Russia. The FSB’s statement also, bizarrely, asserted collusion between the NSA and Apple, throwing the veracity of the rest of the FSB’s claims into question. Private sector offensive actors like NSO, QuaDream, and others, have regularly fielded zero-click, zero-day exploits against Apple and Android phones, without any collusion with these companies.
#NSA #Apple #Pegasus #NSO
Forwarded from Pegasus NSO & other spyware
Facebook approached NSO to buy Pegasus spyware capabilities to monitor certain iOS users, according to a statement filed in a court case by the NSO CEO
WhatsApp vs. NSO Group, et al.
4:19-cv-07123-PJH
https://www.documentcloud.org/documents/6824735-Declaration-of-Shalev-Hulio-in-Support-of.html
#Pegasus #NSO #Israel #Facebook #Ios #Apple
New Flaw in Apple Devices Led to Spyware Infection, Researchers Say
Researchers at digital watchdog group Citizen Lab said on Thursday they found #spyware they linked to Israeli firm #NSO that exploited a newly discovered flaw in #Apple (AAPL.O) devices.
While inspecting the Apple device of an employee of a Washington-based civil society group last week, Citizen Lab said it found the flaw had been used to infect the device with NSO's Pegasus spyware, it said in a statement.
🔗Source: Reuters
Substack | Twitter | Minds
📡 Follow:
@G3News
Researchers at digital watchdog group Citizen Lab said on Thursday they found #spyware they linked to Israeli firm #NSO that exploited a newly discovered flaw in #Apple (AAPL.O) devices.
While inspecting the Apple device of an employee of a Washington-based civil society group last week, Citizen Lab said it found the flaw had been used to infect the device with NSO's Pegasus spyware, it said in a statement.
🔗Source: Reuters
Substack | Twitter | Minds
📡 Follow:
@G3News
Reuters
New flaw in Apple devices led to spyware infection, researchers say
Researchers at digital watchdog group Citizen Lab said on Thursday they found spyware they linked to Israeli firm NSO that exploited a newly discovered flaw in Apple devices.
Apple and Google confirm governments spy on users through push notifications
#Push #notifications can reveal private information and governments can essentially access this data if they want.
A US senator has asked the Department of Justice to let #Apple and #Google disclose how governments surveil users through push notifications.
Apple says the federal government stopped it from being transparent about the practice.
Google has also acknowledged the senator’s plea and said it is committed to keeping users informed about government requests for push notification data.
Government agencies have been spying on smartphone users through push notifications sent out by apps, a US senator wrote in a letter to the Department of Justice on December 6.
Oregon Senator Ron Wyden has asked the Department of Justice to lift any existing restrictions around discussions of push notification surveillance.
“I write to urge the Department of Justice (DOJ) to permit Apple and Google to inform their customers and the general public about demands for smartphone app notification records,” Wyden writes in the letter.
He explains that push notifications pass through a kind of digital post office run by the phone’s operating system providers. “Because Apple and Google deliver push notification data, they can be secretly compelled by governments to hand over this information,” the letter says. This could tell governments how users interact with certain apps, give them access to a notification’s complete text, and disclose some unencrypted content.
Wyden moved the DOJ to allow Apple and Google to be transparent about the demands they receive from governments regarding push notification #surveillance.
Meanwhile, the two companies welcomed Wyden’s letter and acknowledged that push notification surveillance has been happening for a while. Apple even said it was not allowed to disclose government requests for push notification data but will start informing users about it now.
“In this case, the federal government prohibited us from sharing any information,” Apple said in a statement published by Reuters. “Now that this method has become public, we are updating our transparency reporting to detail these kinds of requests.”
Google also acknowledged the issue and said it shared Wyden’s “commitment to keeping users informed about these requests.” Google’s transparency report already documents governmental requests for users’ push notification data.
https://www.androidauthority.com/apple-google-push-notification-surveillance-3392252/
Comments
https://news.ycombinator.com/item?id=38543155
https://news.ycombinator.com/item?id=38555810
#gov #why
#Push #notifications can reveal private information and governments can essentially access this data if they want.
A US senator has asked the Department of Justice to let #Apple and #Google disclose how governments surveil users through push notifications.
Apple says the federal government stopped it from being transparent about the practice.
Google has also acknowledged the senator’s plea and said it is committed to keeping users informed about government requests for push notification data.
Government agencies have been spying on smartphone users through push notifications sent out by apps, a US senator wrote in a letter to the Department of Justice on December 6.
Oregon Senator Ron Wyden has asked the Department of Justice to lift any existing restrictions around discussions of push notification surveillance.
“I write to urge the Department of Justice (DOJ) to permit Apple and Google to inform their customers and the general public about demands for smartphone app notification records,” Wyden writes in the letter.
He explains that push notifications pass through a kind of digital post office run by the phone’s operating system providers. “Because Apple and Google deliver push notification data, they can be secretly compelled by governments to hand over this information,” the letter says. This could tell governments how users interact with certain apps, give them access to a notification’s complete text, and disclose some unencrypted content.
Wyden moved the DOJ to allow Apple and Google to be transparent about the demands they receive from governments regarding push notification #surveillance.
Meanwhile, the two companies welcomed Wyden’s letter and acknowledged that push notification surveillance has been happening for a while. Apple even said it was not allowed to disclose government requests for push notification data but will start informing users about it now.
“In this case, the federal government prohibited us from sharing any information,” Apple said in a statement published by Reuters. “Now that this method has become public, we are updating our transparency reporting to detail these kinds of requests.”
Google also acknowledged the issue and said it shared Wyden’s “commitment to keeping users informed about these requests.” Google’s transparency report already documents governmental requests for users’ push notification data.
https://www.androidauthority.com/apple-google-push-notification-surveillance-3392252/
Comments
https://news.ycombinator.com/item?id=38543155
https://news.ycombinator.com/item?id=38555810
#gov #why
Android Authority
Apple and Google confirm governments spy on users through push notifications
Responding to a senator's letter to the Department of Justice, Apple and Google have confirmed governments ask them for push notification data.
#Apple now requires a judge's consent to hand over #push notification data
https://www.reuters.com/technology/apple-now-requires-judges-consent-hand-over-push-notification-data-2023-12-12/
Comments
https://www.reuters.com/technology/apple-now-requires-judges-consent-hand-over-push-notification-data-2023-12-12/
Comments
Reuters
Apple now requires a judge's consent to hand over push notification data
Apple has said it now requires a judge's order to hand over information about its customers' push notification to law enforcement, putting the iPhone maker's policy in line with rival Google and raising the hurdle officials must clear to get app data about…
4-year campaign backdoored iPhones using possibly the most advanced exploit ever
"Triangulation" infected dozens of iPhones belonging to employees of Moscow-based Kaspersky.
Researchers on Wednesday presented intriguing new findings surrounding an attack that over four years backdoored dozens if not thousands of iPhones, many of which belonged to employees of Moscow-based security firm Kaspersky. Chief among the discoveries: the unknown attackers were able to achieve an unprecedented level of access by exploiting a vulnerability in an undocumented hardware feature that few if anyone outside of Apple and chip suppliers such as ARM Holdings knew of.
“The exploit's sophistication and the feature's obscurity suggest the attackers had advanced technical capabilities,” Kaspersky researcher Boris Larin wrote in an email. “Our analysis hasn't revealed how they became aware of this feature, but we're exploring all possibilities, including accidental disclosure in past firmware or source code releases. They may also have stumbled upon it through hardware reverse engineering.”
Four zero-days exploited for years
...
https://arstechnica.com/security/2023/12/exploit-used-in-mass-iphone-infection-campaign-targeted-secret-hardware-feature/
#iphone #apple #backdoor
"Triangulation" infected dozens of iPhones belonging to employees of Moscow-based Kaspersky.
Researchers on Wednesday presented intriguing new findings surrounding an attack that over four years backdoored dozens if not thousands of iPhones, many of which belonged to employees of Moscow-based security firm Kaspersky. Chief among the discoveries: the unknown attackers were able to achieve an unprecedented level of access by exploiting a vulnerability in an undocumented hardware feature that few if anyone outside of Apple and chip suppliers such as ARM Holdings knew of.
“The exploit's sophistication and the feature's obscurity suggest the attackers had advanced technical capabilities,” Kaspersky researcher Boris Larin wrote in an email. “Our analysis hasn't revealed how they became aware of this feature, but we're exploring all possibilities, including accidental disclosure in past firmware or source code releases. They may also have stumbled upon it through hardware reverse engineering.”
Four zero-days exploited for years
...
https://arstechnica.com/security/2023/12/exploit-used-in-mass-iphone-infection-campaign-targeted-secret-hardware-feature/
#iphone #apple #backdoor
Ars Technica
4-year campaign backdoored iPhones using possibly the most advanced exploit ever
"Triangulation" infected dozens of iPhones belonging to employees of Moscow-based Kaspersky.
#Apple will cut off 3rd-party appstore updates if iPhone is not in EU for a month
https://www.theverge.com/2024/3/7/24093437/apple-iphone-third-party-app-store-dma-eu
https://www.theverge.com/2024/3/7/24093437/apple-iphone-third-party-app-store-dma-eu
The Verge
Apple will cut off third-party app store updates if your iPhone leaves the EU for a month
Third-party app updates can run into a cutoff.
Unpatchable vulnerability in Apple chip leaks secret encryption keys | Ars Technica –
A newly discovered vulnerability baked into Apple’s M-series of chips allows attackers to extract secret keys from Macs when they perform widely used cryptographic operations, academic researchers have revealed in a paper published Thursday
#Apple #Vulnerability #Infosec
A newly discovered vulnerability baked into Apple’s M-series of chips allows attackers to extract secret keys from Macs when they perform widely used cryptographic operations, academic researchers have revealed in a paper published Thursday
#Apple #Vulnerability #Infosec
Ars Technica
Unpatchable vulnerability in Apple chip leaks secret encryption keys
Fixing newly discovered side channel will likely take a major toll on performance.
This is big: The US Govt has created a hardware #backdoor in the CPUs of #Apple devices. This cannot be patched with a software update. Every owner of an Apple device is affected. You have no security. US spy agencies will have done the same with other CPUs.
https://twitter.com/KimDotcom/status/1772694668582453465
https://twitter.com/KimDotcom/status/1772694668582453465
Forwarded from Pegasus NSO & other spyware
How to detect Predator spyware on Phone (iOS) | OneJailbreak - 21/03/2024
Cytrox, a prominent Macedonian cybersecurity firm
- Cytrox (10 posts)
- Predator ( 25 posts)
#Predator #Cytrox #Apple #IoS
Cytrox, a prominent Macedonian cybersecurity firm
, gained notoriety in 2021 for its development and dissemination of the Predator spyware targeting iPhones. This sophisticated spyware successfully infiltrated iOS 14.6, the latest OS version at the time, through the utilization of single-click links distributed via the popular messaging platform, WhatsApp. Predator persists after reboot using the iOS automation feature
.- Cytrox (10 posts)
- Predator ( 25 posts)
#Predator #Cytrox #Apple #IoS
Forwarded from Pegasus NSO & other spyware
"Is Pegasus 2.0 coming?
Apple warns some Indian users their iPhone may be bugged by Pegasus-type spyware | Technology News - The Indian Express -
#Pegasus #NSO #Apple #iPhone #India #Spyware
Apple warns iPhone users in India and 91 other countries about potential spyware attacks. The company previously sent similar warnings to Indian politicians, suggesting possible state-sponsored spyware attacks."
Apple warns some Indian users their iPhone may be bugged by Pegasus-type spyware | Technology News - The Indian Express -
#Pegasus #NSO #Apple #iPhone #India #Spyware
Skynet 2024: The infrastructure is complete
The last piece in the infrastructure that allows the operation of Skynet is now in place just announced a week ago. With this piece the advent of wireless peer to peer command and control of devices and robotics now become possible in full, with a range to affect all of the world.
https://odysee.com/Skynet-x1#c7d77f5cfe7b4c13737487e6d5c67831e387daaf
#Google #apple #surveillance #why
The last piece in the infrastructure that allows the operation of Skynet is now in place just announced a week ago. With this piece the advent of wireless peer to peer command and control of devices and robotics now become possible in full, with a range to affect all of the world.
https://odysee.com/Skynet-x1#c7d77f5cfe7b4c13737487e6d5c67831e387daaf
#Google #apple #surveillance #why
Odysee
Skynet 2024: The Infrastructure is Complete!
The last piece in the infrastructure that allows the operation of Skynet is now in place just announced a week ago. With this piece the advent of wireless peer to peer command and control of devices a...
#WhatsApp, #Signal and #Telegram among apps cut from #iPhone app store to comply with censorship demand
#China ordered #Apple to remove some of the world’s most popular chat messaging apps from its app store in the country, the latest example of censorship demands on the iPhone seller in the company’s second-biggest market.
https://www.wsj.com/tech/apple-removes-whatsapp-threads-from-china-app-store-on-government-orders-a0c02100
#China ordered #Apple to remove some of the world’s most popular chat messaging apps from its app store in the country, the latest example of censorship demands on the iPhone seller in the company’s second-biggest market.
https://www.wsj.com/tech/apple-removes-whatsapp-threads-from-china-app-store-on-government-orders-a0c02100
WSJ
Exclusive | China Orders Apple to Remove Popular Messaging Apps
WhatsApp, Signal and Telegram among apps cut from iPhone app store to comply with censorship demand.
Apple intelligence is dumb
At WWDC 2024, Apple announced its first major AI feature "Apple Intelligence", which brings a suite of new tools to the iPhone and Mac.
#Apple has it's own foundation models, but will also rely on #OpenAI in the cloud for certain #AI jobs.
https://odysee.com/lol-apple-intelligence-is-dumb...#0111775c34ba991ff57ffd7f93c134fafe49c9af
At WWDC 2024, Apple announced its first major AI feature "Apple Intelligence", which brings a suite of new tools to the iPhone and Mac.
#Apple has it's own foundation models, but will also rely on #OpenAI in the cloud for certain #AI jobs.
https://odysee.com/lol-apple-intelligence-is-dumb...#0111775c34ba991ff57ffd7f93c134fafe49c9af
Odysee
lol Apple Intelligence is dumb...
At WWDC 2024, Apple announced it's first major AI feature "Apple Intelligence", which brings a suite of new tools to the iPhone and Mac. Apple has it's own foundation models, but will also rely on Ope...
#Apple Intelligence may get #Google #Gemini #ai support in the next few months
https://www.xda-developers.com/apple-intelligence-google-gemini-support-rumor/
https://www.xda-developers.com/apple-intelligence-google-gemini-support-rumor/
XDA
Apple Intelligence may get Google Gemini support in the next few months
Apple may have been late to the AI party, but it's catching up by bringing everybody else's models under one umbrella.
Apple’s requirements to hit creators and fans on Patreon | Patreon
Patreon is a pretty popular system that allows you to sponsor artists or app developers. Now Apple requires 30% of everything paid to developers via Patreon for iPhone apps.
Because too much money is never enough. (It's not like #Apple is one of the richest companies in tech, huh.)
#Patreon #EvilApple
Patreon is a pretty popular system that allows you to sponsor artists or app developers. Now Apple requires 30% of everything paid to developers via Patreon for iPhone apps.
Because too much money is never enough. (It's not like #Apple is one of the richest companies in tech, huh.)
#Patreon #EvilApple