Detecting an extremely dangerous vulnerability on nearly 16,000 iOS applications
Apps with high download volume and users of over 100 million people like Instagram, Amazon, Twitter and Dropbox are likely to be affected.
ZipperDown, a serious security vulnerability that exists in iOS apps, was discovered by a group of security experts called Pangu Lab. Taking advantage of this vulnerability, hackers can overwrite data or run dangerous code on the application. Users' devices may be in danger if downloaded one of the applications that has ZipperDown attached.
According to security experts, there are about 9,978 iOS applications that exist in the aforementioned flaws, accounting for about 10% of existing iOS applications on the App Store. Notably, apps with high download volume and users of over 100 million people like Instagram, Amazon, Twitter and Dropbox are likely to be affected by ZipperDown, while apps like Weibo, QQ Music, MOMO, NetEase Music, and Kwai, . have been identified as containing vulnerabilities long ago.
Depending on the application, hackers can exploit vulnerabilities to attack in different directions, but the most common is still control and fake connection to the device to enable remote malicious code via the network. cord.
Developers need to contact the Pangu team to verify if their application contains a vulnerability, thus finding a suitable solution.
See more:
- Intel's chip has eight new serious vulnerabilities
- Detecting zero-day vulnerabilities in Internet Explorer helps hackers gain control of the computer
- Only charging the battery through a computer, your iPhone may also be hacked
- VMware patches RCE Spring4Shell vulnerability on a wide range of products
- Internet Explorer crashed extremely dangerous, Microsoft released an emergency patch
- Detecting a new Linux vulnerability allows hackers to gain control of the VPN connection
- Detecting zero-day vulnerability in the Dropbox 10 Windows app, users pay attention!
- A dangerous vulnerability that has existed for 18 years threatens millions of AMD Ryzen and EPYC CPUs
- Detecting a vulnerability that makes 3,000 companies using Microsoft Azure vulnerable to hackers reading data over the past 2 years
- Microsoft fixes 'dangerous' errors for Windows
- Patches of dangerous vulnerabilities being exploited by hackers contain dangerous holes and then continue to be exploited by hackers
- Detecting WhatsApp flaws allows an attacker to access files on the machine
- Detecting an 8-year-old security flaw, affecting 150 HP printer models
- How to detect malicious apps on Android
- Detecting a Google Drive vulnerability could allow hackers to trick users into installing malware
- Specter V2 vulnerability re-appears to attack Intel, Arm CPUs, AMD chips are not affected
- Extremely dangerous zero-day vulnerability on Chrome: Users update now!