Telegram Group & Telegram Channel
苹果紧急修复两个被用于“复杂攻击”的iOS/macOS高危漏洞

2025年4月,苹果发布了一轮带外安全更新,以紧急修复两个被积极利用的高危漏洞(CVE-2025-31200 和 CVE-2025-31201)。这两个漏洞影响 iOS、iPadOS 和 macOS 系统,苹果证实已有针对性极强的复杂攻击利用这些漏洞对特定用户发动攻击。

漏洞详情如下:
CVE-2025-31200(CoreAudio):这是一个内存损坏漏洞,可通过恶意构造的媒体文件触发远程代码执行。漏洞由 Google 威胁分析小组(TAG)发现,苹果通过改进边界检查加以修复。
CVE-2025-31201(RPAC):该漏洞允许拥有读写权限的攻击者绕过 iOS 的指针身份验证机制(Pointer Authentication)。苹果已移除含有缺陷的代码以修复该问题。

受影响的设备包括
iPhone XS 及更新机型、iPad Pro(13”、11” 各代)、iPad Air 第三代及更新机型、iPad mini 第五代及更新机型、iPad 第七代及更新机型等。

苹果未披露具体攻击细节,但指出此次攻击目标集中,疑似由商业间谍软件商或国家级行为者发起。苹果呼吁所有用户尽快更新系统,以降低潜在风险。



tg-me.com/CN_Privacy/557
Create:
Last Update:

苹果紧急修复两个被用于“复杂攻击”的iOS/macOS高危漏洞

2025年4月,苹果发布了一轮带外安全更新,以紧急修复两个被积极利用的高危漏洞(CVE-2025-31200 和 CVE-2025-31201)。这两个漏洞影响 iOS、iPadOS 和 macOS 系统,苹果证实已有针对性极强的复杂攻击利用这些漏洞对特定用户发动攻击。

漏洞详情如下:
CVE-2025-31200(CoreAudio):这是一个内存损坏漏洞,可通过恶意构造的媒体文件触发远程代码执行。漏洞由 Google 威胁分析小组(TAG)发现,苹果通过改进边界检查加以修复。
CVE-2025-31201(RPAC):该漏洞允许拥有读写权限的攻击者绕过 iOS 的指针身份验证机制(Pointer Authentication)。苹果已移除含有缺陷的代码以修复该问题。

受影响的设备包括
iPhone XS 及更新机型、iPad Pro(13”、11” 各代)、iPad Air 第三代及更新机型、iPad mini 第五代及更新机型、iPad 第七代及更新机型等。

苹果未披露具体攻击细节,但指出此次攻击目标集中,疑似由商业间谍软件商或国家级行为者发起。苹果呼吁所有用户尽快更新系统,以降低潜在风险。

BY 隐私中国 Dark Web Inform


Warning: Undefined variable $i in /var/www/tg-me/post.php on line 283

Share with your friend now:
tg-me.com/CN_Privacy/557

View MORE
Open in Telegram


telegram Telegram | DID YOU KNOW?

Date: |

To pay the bills, Mr. Durov is issuing investors $1 billion to $1.5 billion of company debt, with the promise of discounted equity if the company eventually goes public, the people briefed on the plans said. He has also announced plans to start selling ads in public Telegram channels as soon as later this year, as well as offering other premium services for businesses and users.

Telegram hopes to raise $1bn with a convertible bond private placement

The super secure UAE-based Telegram messenger service, developed by Russian-born software icon Pavel Durov, is looking to raise $1bn through a bond placement to a limited number of investors from Russia, Europe, Asia and the Middle East, the Kommersant daily reported citing unnamed sources on February 18, 2021.The issue reportedly comprises exchange bonds that could be converted into equity in the messaging service that is currently 100% owned by Durov and his brother Nikolai.Kommersant reports that the price of the conversion would be at a 10% discount to a potential IPO should it happen within five years.The minimum bond placement is said to be set at $50mn, but could be lowered to $10mn. Five-year bonds could carry an annual coupon of 7-8%.

telegram from us


Telegram 隐私中国 Dark Web Inform
FROM USA