Notice: file_put_contents(): Write of 7791 bytes failed with errno=28 No space left on device in /var/www/tg-me/post.php on line 50
隐私中国 Dark Web Inform | Telegram Webview: CN_Privacy/525 -
Telegram Group & Telegram Channel
iOS和macOS曝关键漏洞,可能绕过TCC框架

2024年12月16日,苹果的iOS和macOS系统被曝出一个严重漏洞(CVE-2024-44131),该漏洞可能绕过透明度、同意和控制(TCC)框架,导致敏感信息未经授权被访问。TCC框架是苹果设备的核心安全功能,负责用户对应用程序访问敏感数据的授权。

漏洞位于文件提供组件中,具体表现为恶意应用可在后台通过符号链接劫持文件移动或复制操作,从而访问包括健康数据、GPS位置、麦克风、摄像头等敏感信息。该攻击能够绕过TCC框架,且在过程中不会触发任何提示,极大地削弱了设备的安全性。

该漏洞被Jamf Threat Labs发现并报告,指出攻击者通过利用文件管理组件fileproviderd的高权限,能够在不被用户察觉的情况下,将数据上传到远程服务器。尽管苹果已经在iOS 18、iPadOS 18和macOS Sequoia 15中通过增强符号链接验证修复了此问题,但漏洞的严重性引发了对系统访问控制和用户隐私的广泛关注。

此外,苹果还发布了其他安全更新,修复了WebKit、音频逻辑漏洞等问题,并加强了Safari浏览器的隐私保护,防止网站通过私人中继获取原始IP地址。



tg-me.com/CN_Privacy/525
Create:
Last Update:

iOS和macOS曝关键漏洞,可能绕过TCC框架

2024年12月16日,苹果的iOS和macOS系统被曝出一个严重漏洞(CVE-2024-44131),该漏洞可能绕过透明度、同意和控制(TCC)框架,导致敏感信息未经授权被访问。TCC框架是苹果设备的核心安全功能,负责用户对应用程序访问敏感数据的授权。

漏洞位于文件提供组件中,具体表现为恶意应用可在后台通过符号链接劫持文件移动或复制操作,从而访问包括健康数据、GPS位置、麦克风、摄像头等敏感信息。该攻击能够绕过TCC框架,且在过程中不会触发任何提示,极大地削弱了设备的安全性。

该漏洞被Jamf Threat Labs发现并报告,指出攻击者通过利用文件管理组件fileproviderd的高权限,能够在不被用户察觉的情况下,将数据上传到远程服务器。尽管苹果已经在iOS 18、iPadOS 18和macOS Sequoia 15中通过增强符号链接验证修复了此问题,但漏洞的严重性引发了对系统访问控制和用户隐私的广泛关注。

此外,苹果还发布了其他安全更新,修复了WebKit、音频逻辑漏洞等问题,并加强了Safari浏览器的隐私保护,防止网站通过私人中继获取原始IP地址。

BY 隐私中国 Dark Web Inform


Warning: Undefined variable $i in /var/www/tg-me/post.php on line 283

Share with your friend now:
tg-me.com/CN_Privacy/525

View MORE
Open in Telegram


telegram Telegram | DID YOU KNOW?

Date: |

Can I mute a Telegram group?

In recent times, Telegram has gained a lot of popularity because of the controversy over WhatsApp’s new privacy policy. In January 2021, Telegram was the most downloaded app worldwide and crossed 500 million monthly active users. And with so many active users on the app, people might get messages in bulk from a group or a channel that can be a little irritating. So to get rid of the same, you can mute groups, chats, and channels on Telegram just like WhatsApp. You can mute notifications for one hour, eight hours, or two days, or you can disable notifications forever.

Telegram has exploded as a hub for cybercriminals looking to buy, sell and share stolen data and hacking tools, new research shows, as the messaging app emerges as an alternative to the dark web.An investigation by cyber intelligence group Cyberint, together with the Financial Times, found a ballooning network of hackers sharing data leaks on the popular messaging platform, sometimes in channels with tens of thousands of subscribers, lured by its ease of use and light-touch moderation.telegram from us


Telegram 隐私中国 Dark Web Inform
FROM USA