Skip to main content

Security

See All Stories

Apple ramping up effort to stop leaks with legal action, according to leaked memo

Bloomberg has published a new report that includes a memo sent to all Apple employees with a clear message: employees who leak internal information will be fired, face legal action when possible, and risk becoming unemployable at other companies.

The memo specifically references 9to5Mac and the iOS 11 GM leak that we received last fall which led to discovering the iPhone X name and features, Animoji, and the cellular Apple Watch Series 3 ahead of Apple’s event.


Expand
Expanding
Close

Vulnerability in iOS camera QR code reader could direct users to malicious websites

A vulnerability in the QR code reader built into the iOS camera app could allow users to be directed to a malicious website without their knowledge.

As of iOS 11, you can simply point your iPhone at a QR code using the standard camera app, and it will read and act on the code. In the case of an embedded website URL, iOS shows you the link address and asks you to tap to confirm you want to visit it. But you may not be visiting the link displayed …


Expand
Expanding
Close

Apple ID logins sell for $15 on the dark web, the most valuable non-financial credentials

If you’ve ever received a phishing email attempting to capture your Apple ID login – like the recent App Store subscription ones – there’s a good reason for that: they can be sold on the dark web for $15.39 each.

That’s the most valuable login on the market for anything outside of the financial services sector, according to research conducted by top10vpn.com


Expand
Expanding
Close

American firm claims it can unlock encrypted iPhones running iOS 11 — for $15,000 and up

Yet another security company is pitching high-paying customers on the ability to possibly crack iPhones running a version of iOS 11, Forbes reports. US-based firm Grayshift is reportedly advertising access to a $15,00o tool called GrayKey that offers 300 attempts to access data on encrypted iPhones, while a pricier $30,000 version offers unlimited attempts.


Expand
Expanding
Close

Major US carriers working together on next-gen ‘mobile authentication platform’ to replace weak SMS system

Apple security

We typically see the big four US carriers competing in a cut throat fashion to steal customers from each other, but even the strongest rivals can be frenemies sometimes. The Mobile Authentication Taskforce — AT&T, Verizon, T-Mobile, and Sprint — have released product details for what it calls a “next-generation mobile authentication platform.”


Expand
Expanding
Close

Why you should use Malwarebytes to protect your Mac

When we cover dozens of stories each year about Mac related security issues and malware discovered in the wild, it’s hard to imagine that the misconception that “Macs don’t get viruses” still exists. Although there is some truth to it. Macs are much more resilient to what are commonly classified as “viruses” and in general malware is much more rare for Mac users versus Windows. But that doesn’t mean Mac users don’t need to protect themselves from malware threats. And it’s not just malware, there are a long list of other threats that Mac users should be aware of and protecting themselves against.

The security experts at long-time Mac software developer Malwarebytes are often the source of security stories we cover throughout the year on 9to5Mac. We’ve come to trust its team for the many discoveries and coverage of malware and security related issues for Mac users. That’s why it’s easy to give a recommendation on the Malwarebytes software as a go-to option for protecting your Mac. Here’s how it works:


Expand
Expanding
Close

PSA: Watch out for these convincing App Store subscription phishing emails

Representing such a large and diverse percentage of the market, Apple customers are common targets of phishing attempts. Whether they be innovative methods via iOS applications or traditional email phishing attempts, it’s important for customers to remain skeptical of communication asking for sensitive information.

A new wave of phishing attempts targeted at Apple customers comes in the form of subscription renewal email and has seemingly become so widespread, Apple has shared new tips on protecting yourself…


Expand
Expanding
Close

Cellebrite claiming it can crack iPhones on iOS 11, but may not affect latest iOS updates

Cellebrite, the mobile forensics firm that helped the US government break into the San Bernardino shooter’s iPhone 5c, is apparently claiming it can crack any iPhone even if it’s running iOS 11. This is said to apply even to the latest flagship iPhones, although it’s possible this only applies to exploits fixed in recent updates to iOS 11.


Expand
Expanding
Close

Report: Intel intentionally hid Meltdown and Spectre security flaws from U.S. cyber security officials

Intel reportedly did not disclose Meltdown or Spectre security flaws to U.S. cyber security officials after being notified of the flaws because hackers had not exploited the vulnerabilities yet, Reuters reports.

The company did not disclose the information to the United States Computer Emergency Readiness Team, better known as US-CERT, until January 3. This was after the details of the vulnerabilities had leaked online.


Expand
Expanding
Close