Apple crypto users potentially exposed to iOS, macOS vulnerabilities Apple crypto users potentially exposed to iOS, macOS vulnerabilities
Kaspersky drew attention to vulnerabilities in Apple operating systems, enabling full device access.
2 min read
Updated: Apr. 18, 2023 at 5:45 pm UTC
Cover art/illustration via CryptoSlate. Image includes combined content which may include AI-generated content.
Wu Blockchain warned Apple crypto users that operating system vulnerabilities could expose them to attackers.
“A very serious vulnerability has been found again in Apple’s operating system. Attackers can gain root privileges, which may compromise the security of users’ crypto assets.“
Crypto threat posed by root vulnerabilities
Linking an article from Kaspersky, it was noted that these are “high threat” vulnerabilities applicable to iOS and macOS.
Given the severity of the threat, Apple responded immediately with updates to patch its latest operating systems and “several previous versions.”
A deep dive by Kaspersky revealed the first vulnerability, labeled “CVE-2023-28205,” relates to the development architecture of the company’s Safari web browser. If exploited, bad actors could execute arbitrary code on the device.
Vulnerability “CVE-2023-28206” enables attackers to execute code with the operating system’s core permissions. When both vulnerabilities are exploited together, gaining access to the device and bypassing security partitions to obtain full access is possible.
“Thus, these two vulnerabilities can be used in combination: the first serves to initially penetrate the device so that the second can be exploited. The second, in turn, allows you to “escape from the sandbox” and do almost anything with the infected device.”
Protecting your device
Kaspersky pointed out that Safari architecture renders all webpages on Apple’s mobile devices, regardless of whether a different browser is used. Moreover, such is the browser architecture that “zero-click” infection is possible.
The firm recommends installing the newest Apple updates – for those on the latest iOS, iPadOS, or tvOS devices, this would be version 16.4.1.
Older iPhones and iPads no longer supported should ensure the device runs version 15.7.5.
Responding to Wu Blockchain, one Twitter user said their Trust Wallet was hacked today, implying attackers had exploited the device vulnerabilities mentioned.
Similarly, another drew parallels with this and ongoing MetaMask vulnerabilities, which seemingly have no known attack vectors.
Posted In: Hacks
Author 
Samuel Wan
Samuel Wan, a finance professional turned full-time crypto content creator, values individual autonomy and personal freedom in his pursuits.
Featured Story
Advertise Here
In this article
Bitcoin, a decentralized currency that defies the sway of central banks or administrators, transacts electronically, circumventing intermediaries via a peer-to-peer network.