Operation Triangulation: iOS devices targeted with previously unknown malware(securelist.com)

114 points by fortran77 3 years ago | 23 comments

Notepad++ supply chain attack breakdown(securelist.com)

321 points by natebc 8 months ago | 145 comments

Kaspersky Securelist research article analyzing the Notepad++ supply chain attack, its unnoticed execution chains, and new indicators of compromise.

Phishers are hijacking legitimate cloud infrastructure(securelist.com)

46 points by lschueller 2 months ago | 13 comments

The GitVenom campaign: cryptocurrency theft using GitHub(securelist.com)

14 points by miohtama 1 year ago | 0 comments

Kaspersky discloses iPhone hardware feature vital in Operation Triangulation(kaspersky.com)

78 points by Corrado 2 years ago | 34 comments

Targeted attack on our management with the Triangulation Trojan(usa.kaspersky.com)

173 points by madmanweb 3 years ago | 95 comments

4-year campaign backdoored iPhones using advanced exploit(arstechnica.com)

386 points by airstrike 2 years ago | 222 comments

Ars Technica article on Operation Triangulation, a four-year campaign that backdoored iPhones of Kaspersky employees using an exploit abusing a secret hardware feature.

Recent 'MFA Bombing' Attacks Targeting Apple Users(krebsonsecurity.com)

379 points by vdddv 2 years ago | 212 comments

KrebsOnSecurity article on phishing attacks that abuse Apple's password reset feature to flood devices with prompts, followed by calls spoofing Apple support.

iMessage with PQ3 Cryptographic Protocol(security.apple.com)

515 points by galad87 2 years ago | 247 comments

Apple Security Research blog post introducing PQ3, a post-quantum cryptographic protocol for iMessage end-to-end encryption.

Apple/macOS removed from official Unix registry(opengroup.org)

259 points by john_alan 16 days ago | 221 comments

The Open Group's official Open Brand register listing UNIX certified products, which reportedly no longer includes Apple macOS.

U.K. orders Apple to let it spy on users’ encrypted accounts(washingtonpost.com)

642 points by Despegar 1 year ago | 925 comments

Washington Post exclusive reporting that the U.K. secretly ordered Apple to provide blanket access to users' encrypted iCloud backups worldwide.

How a single line of code could brick your iPhone(rambo.codes)

467 points by sashk 1 year ago | 111 comments

A blog post describing an iOS vulnerability where a legacy Darwin notifications API could be abused with a single line of code to brick an iPhone.