Two iPhone wireless vulnerabilities exploited
54286
Blog: But details will have to wait until next week's Black Hat conference.
424770
A group of hackers has released perhaps the easiest application yet for getting third-party software onto iPhones running the most up-to-date version of Apple's firmware.
322386
Hackers cash in by targeting gadget freaks that crave an Apple phone but aren't wild about the prospect of an AT&#38;T service contract.
406616
Insecurity through obscurity Apple has released updates for two widely distributed products that harbored a raft of security vulnerabilities, some of which were actively being exploited by miscreants. Unbelievably, the company isn't presenting either as a security fix to mainstream users despite the risk the bugs pose for its millions of users.â¦
677076
Systems administrators say iPhones flooding the university's wireless network with access requests are causing things to freeze up.
19025
Kernel bogey Security researchers have discovered you can crash an iPhone through the medium of a cleverly crafted webpage.â¦
143389
This QuickTime buffer overflow vulnerability appears to be different from a similar vulnerability patched by Apple in December 2007.
249338
Two researchers demonstrate how unprotected, public VoIP phones could expose the internal network of a company or organization.
608293
There is no need for serious alarm, but the exploit does appear to have been crafted before Apple Computer patched the flaw last week.
392837
Hackers have found a way to use  Apple Inc&#39;s iPhone on networks other than AT&T Inc&#39;s, opening  up the coveted device to rival carriers and overseas customers,  according to a Web report on Friday.
576338
(InfoWorld) - Apple's iPhone is a toughÂ target for hackers, but a security researcher warned Friday that there are ways the sleek device could potentially be compromised. TheÂ iPhoneÂ has no security software, but Apple doesn't let people load third-party programs on the device, reducing the risk of infection from malicious software. But when the iPhone is connected to the Web, possibilities emerge, said Marius van Oers, a security researcher with McAfee's AVERT Labs in Amsterdam. He doesn't claim to have uncovered a specific security hole in the device, but listed several ways thatÂ determined hackersÂ could use the Web to try to find a way in. Apple is relying on developers to create rich Web-based applications that will be accessed through the mobile version of the company's Safari Web browser. Browser flaws are a proven way for hackers to get unauthorized code running on a system, van Oers said. "It's fairly easy to send someone an SMS (Short Messaging Service) or an e-mail with a Web link," he said. "And once you go to the Web link, then that server can inject code into the iPhone, and if that happens, [a hacker] can have full control." That's what happened with aÂ Safari flawÂ found by Independent Security Evaluators, a company that detailed its findings at the Black Hat security conference in August. By constructing a malicious Web site, the researchers injected code into the iPhone and pilfered recent text messages, phone numbers and e-mail. Apple has since patched the flaw. "Once you get access to the system, it's all over," van Oers said. He presented his view ofÂ iPhone securityÂ Friday at the Virus Bulletin security conference in Vienna. Although he is based in Europe, he examined an iPhone purchased in the U.S. His view of the iPhone's security is more cautionary and speculative, but rooted in the well-known ways that hackers work. Apple also allows the use of JavaScript when the iPhone interacts with Web pages, a programming language that has been used to exploit software problems, van Oers said. Further, Apple's multimedia application QuickTime has been prone to trouble, and there are several proof-of-concept exploits circulating the Web now for version 7, van Oers said. How that proof-of-concept code could affect QuickTime on the iPhone remains to be seen. Nonetheless, with the iPhone already popular in the U.S. and due toÂ go on sale in EuropeÂ in about six weeks, Apple can expect more aggressive attempts by malicious hackers to meddle with it. Hacking mobile devices is less prevalent than hacking desktop computers. But interesting malicious programs have been written for mobiles, including some that repeatedly autodial or send text messages to a premium number. The number is owned by the hackers, who collect the revenue. The chance of those kinds of malicious software affecting the iPhone today is probably low, but "that's the future. Let's hope it will not come to that," van Oers said. Â
113294
Apple has updated its AirPort Extreme wireless networking product to improve compatibility and to fix a security issue.
58546
More jailbreaks than a spaghetti western The latest version of the firmware for Apple's iPhone has fallen to hackers less than a week after its release.â¦
444544
InfoWorld - A team of security experts in Baltimore said it has found a flaw in&#160;Apple&#39;s iPhone handset&#160;that can be used by attackers to access private data stored on it.
769177
Three versions of the smart phone carry vulnerabilities that could allow access to data even when the device is locked.
651759
Security firm has uncovered two bugs that, if exploited, could crash phones and other devices running Microsoft's Windows Mobile software.
693229
(InfoWorld) - A team of security experts in Baltimore said it has found a flaw inÂ Apple's iPhone handsetÂ that can be used by attackers to access private data stored on it. Independent Security Evaluators (ISE) said on a Web site dedicated to explaining the flaw and its exploitation that an attacker could gain access to the iPhone through a wireless access point, or through a Web site controlled by the attacker. Numerous hackers have beenÂ working to gain access to the iPhoneÂ in order to activate certain features or to allow it to be used on cellular networks other than AT&T's. However, this is the first major exploitation of an iPhone security flaw. Because the iPhone connects to wireless Internet access networks, such as Wi-Fi, by name, an attacker could create a network with the same name and encryption method as one the handset already uses. The attacker could then substitute a Web page with exploit code to gain access to the phone, ISE said on its Web site. An attacker could also use a link planted on an unedited or unmoderated online forum, or a link sent by SMS or e-mail to use make use of the flaw and gain access to the handset, ISE said. The company said its researchers had required two weeks of part-time work to find the flaw and exploit it. When the iPhone's Safari browser opens a malicious Web page, malicious code can be run on the phone via the flaw, allowing the attacker to read the iPhone's SMS log, address book, call history, and voice-mail information, which are also then sent to the attacker, ISE said. ISE said it would be presenting full details of the exploit and its procedure at the Black Hat 2007 conference in Las Vegas on August 2. Â