Apple – Page 2 – TheCyberThrone

New Side-Channel Attacks: FLOP and SLAP in Apple’s Processors

New Side-Channel Attacks: FLOP and SLAP in Apple’s Processors

Recent discoveries by security researchers from the Georgia Institute of Technology and Ruhr University Bochum have revealed two new side-channel vulnerabilities in Apple's modern processors, identified as FLOP (False Load…

PravinKarthik January 30, 2025

CVE-2025-24085 Apple fixes Critical Zeroday

CVE-2025-24085 Apple fixes Critical Zeroday

Background CVE-2025-24085 is a critical zero-day vulnerability identified in Apple's Core Media framework. This framework is integral to the media processing pipeline used by AVFoundation and other high-level media frameworks…

PravinKarthik January 28, 2025

Zeroday Vulnerabilities Prevailed in 2024 Analysis-Part I

Zeroday Vulnerabilities Prevailed in 2024 Analysis-Part I

What is a Zero-Day Vulnerability? A zero-day vulnerability is a security flaw in software or hardware that is unknown to the vendor or developers. The term "zero-day" signifies that the…

PravinKarthik December 23, 2024

The CyberThrone Most Exploited Vulnerabilities Top 10 – November 2024

Security NewsLetter

The CyberThrone Most Exploited Vulnerabilities Top 10 – November 2024

Welcome to TheCyberThrone most exploited vulnerabilities review. This review is for the month of November 2024 CVE-2024-9463: Palo Alto OS Command Injection CVSS 3.1 Score : 9.9 CISA KEV: Yes This vulnerability is an OS…

PravinKarthik December 1, 2024

CISA KEV Catalog Update Part VI – November 2024

CISA KEV Catalog Update Part VI – November 2024

The US CISA has added the following vulnerabilities to its Known Exploited Vulnerabilities Catalog based on the evidence of active exploitation CVE-2024-44308 With no CVSS score assigned yet, Apple iOS, macOS,…

PravinKarthik November 21, 2024

Apple addressed twin flaws with an emergency patch release

Apple addressed twin flaws with an emergency patch release

Apple has released security patches to address vulnerabilities in its products that are being actively exploited by cybercriminals The first vulnerability tracked as CVE-2024-44308 stems in the JavaScriptCore component. Processing…

PravinKarthik November 20, 2024

PoC Exploit Released for CVE-2024-27842

PoC Exploit Released for CVE-2024-27842

A security researcher Wang Tielei published a PoC exploit codes for a privilege escalation vulnerability CVE-2024-27842 in macOS. The vulnerability has been patched by Apple. The vulnerability is a critical…

PravinKarthik May 27, 2024

Post Quantum Cryptography Protocol for iMessage

Post Quantum Cryptography Protocol for iMessage

Apple plans to update iMessage with a new encryption component, dubbed as PQ3, that can block cyberattacks launched by quantum computers. Since its launch in 2021, the iMessage app was…

PravinKarthik February 22, 2024