Content

Apple Fixes 66 Vulnerabilities Following Pwn2Own

By Marcos Colon

A total of 66 flaws in its Safari, iTunes, macOS, and iOS product lines were addressed by Apple.

A majority of the fixes were discovered during the popular Pwn2Own hacking contest at CanSecWest, according to a report by Threatpost.

Many of the patched vulnerabilities led to memory corruption in WebKit, a web browser engine used by Safari, App Store, and many other OS X, iOS, and watchOS applications.

Seven of the WebKit flaws and 13 Safari vulnerabilities were discovered by former Pwn2Own hacker Lokihardt, who is now part of Google's Project Zero. German hackers Samuel Broß and Niklas Baumstark found five bugs – one in WebKit, another in DisArbitration, and three vulnerabilities in the OS's Speech Framework and Security features.

Contestants of the annual hacking contest earned a total of $143,000 for helping discover the flaws in the Apple products.

Related

DevSecOps Scanning Challenges & Tips

There are many ways to do DevSecOps, and each organization — each security team, even — uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important in understanding how to integrate a security scanner into your DevSecOps machinery. The ultimate goal is speed […]

It Should Be ‘Cybersecurity Culture Month’

It’s Cybersecurity Awareness Month, but security awareness is about much more than just dedicating a month to a few activities. Security awareness is a journey, requiring motivation along the way. And culture. Especially culture.That’s the point Proofpoint Cybersecurity Evangelist Brian Reed drove home in a recent appearance on Business Security Weekly.“If your security awareness program […]

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms and Conditions and Privacy Policy.