Apple Rushes to Block Spyware That Doesn’t Need User’s Click

106
Comment
Favorite

Apple Rushes to Block Spyware That Doesn’t Need User’s Click

Bloomberg2021-09-14

Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware. The ...

Source Link

Disclaimer: Investing carries risk. This is not financial advice. The above content should not be regarded as an offer, recommendation, or solicitation on acquiring or disposing of any financial products, any associated discussions, comments, or posts by author or other users should not be considered as such either. It is solely for general information purpose only, which does not consider your own investment objectives, financial situations or needs. TTM assumes no responsibility or warranty for the accuracy and completeness of the information, investors should do their own research and may seek professional advice before investing.

106

Report

Comment

JunHaoT
·2021-09-14
IPhone is coming
Reply
5
Report
Fold Replies
- Melvin888:
  Another super cycle for I13?
  2021-09-14
  Reply
  Report
Alright
·2021-09-14
Oh no
Reply
3
Report
hbtho
·2021-09-14
Great
Reply
4
Report
sengfuh
·2021-09-14
A
Reply
3
Report
Maybl
·2021-09-14
Great
Reply
2
Report
Fold Replies
- sengfuh:
  Ok
  2021-09-14
  Reply
  Report
Bodoh
·2021-09-14
Good
Reply
3
Report
Fold Replies
- tpchng:
  good
  2021-09-14
  Reply
  Report
StreetMoon
·2021-09-14
Buy
Reply
4
Report
Fold Replies
- Bodoh:
  Ok
  2021-09-14
  Reply
  Report
- JunHaoT:
  Yes
  2021-09-14
  Reply
  Report
Al3x
·2021-09-14
like
Reply
6
Report
Fold Replies
- Bodoh:
  Ok
  2021-09-14
  Reply
  Report
yl2021
·2021-09-14
Pls like & comment
Reply
8
Report
Fold Replies
- Irene104:
  Ok
  2021-09-14
  Reply
  Report
3nn
·2021-09-14
Like pls thanks
Reply
4
Report
Fold Replies
- Limpek:
  Nice
  2021-09-14
  Reply
  Report
Ha0
·2021-09-14
good morning
Reply
3
Report

Most Discussed

7x24

All

Terms and Conditions·Privacy Policy

Company: TTMF Limited. Tech supported by Xiangshang Yixin.

Email：uservice@ttm.financial

{"i18n":{"language":"en_US"},"data":{"share":"https://ttm.financial/m/news/1185576409?lang=en_US&edition=fundamental","thumbnail":"","is_english":true,"pubTime":"2021-09-14 09:19","share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","id":"1185576409","market":"us","top_or_hot":-1,"title":"Apple Rushes to Block Spyware That Doesn’t Need User’s Click","media":"Bloomberg","content":"<div>\n<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe ...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones\">Source Link</a>\n\n</div>\n","source":"lsy1584095487587","html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Apple Rushes to Block Spyware That Doesn’t Need User’s Click</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nApple Rushes to Block Spyware That Doesn’t Need User’s Click\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-09-14 09:19 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe ...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones\">Source Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","isBrief":false,"type":0,"news_type":1,"symbol":"AAPL","symbol_name":"苹果","start_time":0,"source_url":"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones","article_id":"1185576409","we_media_id":null,"thumbnails":[],"rights":null,"url":"https://stock-news.laohu8.com/highlight/detail?id=1185576409","pubTimestamp":1631582371,"sourceInfo":{"source_id":"lsy1584095487587","name":"Bloomberg"},"weMediaInfo":null,"summary":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined ","collect":0,"end_time":0,"defaultTopTitle":"bloomberg.com","property":[],"viewcount":null,"language":"en","relate_stocks":{"AAPL":"苹果"},"translate_title":"苹果急于阻止不需要用户点击的间谍软件","themeId":null,"isJumpTheme":false,"ttsUrl":null,"symbols_score_info":{"AAPL":0.9},"content_text":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.\nThe flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.\n“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.\n“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”\nApple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.\n“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”\nKrstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”\n“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.\nApple shares were little changed in extended trading after closing at $149.55 in New York.\nThe NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”\nNSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.\nIn its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”\nIn June, the company published its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.\nThe White House has raised concerns about NSO Group with senior Israeli officials, the Washington Post reported.\nIn December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.","kind":null,"is_publish_news":null,"is_publish_highlight":null,"is_publish_live":null,"is_publish_wemedia":null,"editions":null,"symbols":[],"gpt_button":1},"commentList":[{"id":886650103,"gmtCreate":1631587736402,"gmtModify":1676530583364,"author":{"id":"4091088321144510","authorId":"4091088321144510","name":"JunHaoT","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":2,"crmLevelSwitch":0},"htmlText":"IPhone is coming&nbsp;","listText":"IPhone is coming&nbsp;","text":"IPhone is coming","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":5,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/886650103","repostId":1185576409,"repostType":4,"repost":{"id":"1185576409","pubTimestamp":1631582371,"share":"https://www.laohu8.com/m/news/1185576409?lang=&edition=full","pubTime":"2021-09-14 09:19","market":"us","language":"en","title":"Apple Rushes to Block Spyware That Doesn’t Need User’s Click","url":"https://stock-news.laohu8.com/highlight/detail?id=1185576409","media":"Bloomberg","summary":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined ","content":"<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.</p>\n<p>The flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.</p>\n<p>The flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.</p>\n<p>“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.</p>\n<p>“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”</p>\n<p>Apple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.</p>\n<p>“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”</p>\n<p>Krstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”</p>\n<p>“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.</p>\n<p>Apple shares were little changed in extended trading after closing at $149.55 in New York.</p>\n<p>The NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”</p>\n<p>NSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.</p>\n<p>In its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”</p>\n<p>In June, the company&nbsp;published&nbsp;its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.</p>\n<p>The White House has raised concerns about NSO Group with senior Israeli officials, the&nbsp;Washington Post reported.</p>\n<p>In December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.</p>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Apple Rushes to Block Spyware That Doesn’t Need User’s Click</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nApple Rushes to Block Spyware That Doesn’t Need User’s Click\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-09-14 09:19 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe ...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"AAPL":"苹果"},"source_url":"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1185576409","content_text":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.\nThe flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.\n“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.\n“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”\nApple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.\n“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”\nKrstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”\n“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.\nApple shares were little changed in extended trading after closing at $149.55 in New York.\nThe NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”\nNSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.\nIn its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”\nIn June, the company published its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.\nThe White House has raised concerns about NSO Group with senior Israeli officials, the Washington Post reported.\nIn December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5862765,"gmtCreate":1631595294860,"gmtModify":1663233856739,"authorId":3577938728188071,"author":{"id":3577938728188071,"authorId":3577938728188071,"name":"Melvin888","avatar":"https://static.tigerbbs.com/1f7e36200d6d8c6159f6d35c041d8e3e","vip":1,"crmLevel":5,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":886650103,"type":1,"supId":0,"prevId":0,"content":"Another super cycle for I13?","text":"Another super cycle for I13?","html":"Another super cycle for I13?"}],"langContent":"EN"},{"id":886687674,"gmtCreate":1631586212098,"gmtModify":1676530582758,"author":{"id":"4087278718158970","authorId":"4087278718158970","name":"Alright","avatar":"https://static.tigerbbs.com/17b986a304be5031eab7c252ee5ea49f","vip":1,"crmLevel":1,"crmLevelSwitch":0},"htmlText":"Oh no","listText":"Oh no","text":"Oh no","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/886687674","repostId":1185576409,"repostType":4,"repost":{"id":"1185576409","pubTimestamp":1631582371,"share":"https://www.laohu8.com/m/news/1185576409?lang=&edition=full","pubTime":"2021-09-14 09:19","market":"us","language":"en","title":"Apple Rushes to Block Spyware That Doesn’t Need User’s Click","url":"https://stock-news.laohu8.com/highlight/detail?id=1185576409","media":"Bloomberg","summary":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined ","content":"<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.</p>\n<p>The flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.</p>\n<p>The flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.</p>\n<p>“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.</p>\n<p>“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”</p>\n<p>Apple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.</p>\n<p>“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”</p>\n<p>Krstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”</p>\n<p>“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.</p>\n<p>Apple shares were little changed in extended trading after closing at $149.55 in New York.</p>\n<p>The NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”</p>\n<p>NSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.</p>\n<p>In its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”</p>\n<p>In June, the company&nbsp;published&nbsp;its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.</p>\n<p>The White House has raised concerns about NSO Group with senior Israeli officials, the&nbsp;Washington Post reported.</p>\n<p>In December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.</p>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Apple Rushes to Block Spyware That Doesn’t Need User’s Click</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nApple Rushes to Block Spyware That Doesn’t Need User’s Click\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-09-14 09:19 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe ...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"AAPL":"苹果"},"source_url":"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1185576409","content_text":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.\nThe flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.\n“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.\n“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”\nApple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.\n“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”\nKrstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”\n“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.\nApple shares were little changed in extended trading after closing at $149.55 in New York.\nThe NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”\nNSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.\nIn its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”\nIn June, the company published its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.\nThe White House has raised concerns about NSO Group with senior Israeli officials, the Washington Post reported.\nIn December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":886682162,"gmtCreate":1631585895556,"gmtModify":1676530582695,"author":{"id":"3574935418304521","authorId":"3574935418304521","name":"hbtho","avatar":"https://static.tigerbbs.com/f083ceda901738dc46b48c3f49dc0dc7","vip":1,"crmLevel":4,"crmLevelSwitch":0},"htmlText":"Great","listText":"Great","text":"Great","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/886682162","repostId":1185576409,"repostType":4,"repost":{"id":"1185576409","pubTimestamp":1631582371,"share":"https://www.laohu8.com/m/news/1185576409?lang=&edition=full","pubTime":"2021-09-14 09:19","market":"us","language":"en","title":"Apple Rushes to Block Spyware That Doesn’t Need User’s Click","url":"https://stock-news.laohu8.com/highlight/detail?id=1185576409","media":"Bloomberg","summary":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined ","content":"<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.</p>\n<p>The flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.</p>\n<p>The flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.</p>\n<p>“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.</p>\n<p>“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”</p>\n<p>Apple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.</p>\n<p>“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”</p>\n<p>Krstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”</p>\n<p>“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.</p>\n<p>Apple shares were little changed in extended trading after closing at $149.55 in New York.</p>\n<p>The NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”</p>\n<p>NSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.</p>\n<p>In its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”</p>\n<p>In June, the company&nbsp;published&nbsp;its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.</p>\n<p>The White House has raised concerns about NSO Group with senior Israeli officials, the&nbsp;Washington Post reported.</p>\n<p>In December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.</p>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Apple Rushes to Block Spyware That Doesn’t Need User’s Click</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nApple Rushes to Block Spyware That Doesn’t Need User’s Click\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-09-14 09:19 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe ...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"AAPL":"苹果"},"source_url":"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1185576409","content_text":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.\nThe flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.\n“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.\n“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”\nApple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.\n“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”\nKrstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”\n“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.\nApple shares were little changed in extended trading after closing at $149.55 in New York.\nThe NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”\nNSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.\nIn its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”\nIn June, the company published its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.\nThe White House has raised concerns about NSO Group with senior Israeli officials, the Washington Post reported.\nIn December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":886614872,"gmtCreate":1631585346196,"gmtModify":1676530582522,"author":{"id":"3557632577472341","authorId":"3557632577472341","name":"sengfuh","avatar":"https://static.tigerbbs.com/221eceb3fd757b12b2f77f2d96659412","vip":1,"crmLevel":3,"crmLevelSwitch":0},"htmlText":"A","listText":"A","text":"A","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/886614872","repostId":1185576409,"repostType":4,"repost":{"id":"1185576409","pubTimestamp":1631582371,"share":"https://www.laohu8.com/m/news/1185576409?lang=&edition=full","pubTime":"2021-09-14 09:19","market":"us","language":"en","title":"Apple Rushes to Block Spyware That Doesn’t Need User’s Click","url":"https://stock-news.laohu8.com/highlight/detail?id=1185576409","media":"Bloomberg","summary":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined ","content":"<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.</p>\n<p>The flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.</p>\n<p>The flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.</p>\n<p>“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.</p>\n<p>“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”</p>\n<p>Apple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.</p>\n<p>“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”</p>\n<p>Krstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”</p>\n<p>“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.</p>\n<p>Apple shares were little changed in extended trading after closing at $149.55 in New York.</p>\n<p>The NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”</p>\n<p>NSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.</p>\n<p>In its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”</p>\n<p>In June, the company&nbsp;published&nbsp;its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.</p>\n<p>The White House has raised concerns about NSO Group with senior Israeli officials, the&nbsp;Washington Post reported.</p>\n<p>In December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.</p>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Apple Rushes to Block Spyware That Doesn’t Need User’s Click</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nApple Rushes to Block Spyware That Doesn’t Need User’s Click\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-09-14 09:19 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe ...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"AAPL":"苹果"},"source_url":"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1185576409","content_text":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.\nThe flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.\n“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.\n“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”\nApple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.\n“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”\nKrstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”\n“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.\nApple shares were little changed in extended trading after closing at $149.55 in New York.\nThe NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”\nNSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.\nIn its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”\nIn June, the company published its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.\nThe White House has raised concerns about NSO Group with senior Israeli officials, the Washington Post reported.\nIn December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"},{"id":886614110,"gmtCreate":1631585333530,"gmtModify":1676530582515,"author":{"id":"4087686543844860","authorId":"4087686543844860","name":"Maybl","avatar":"https://static.tigerbbs.com/8528a3b3e7bad2aa55b4c86ab0e2cedc","vip":1,"crmLevel":2,"crmLevelSwitch":0},"htmlText":"Great","listText":"Great","text":"Great","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":2,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/886614110","repostId":1185576409,"repostType":4,"repost":{"id":"1185576409","pubTimestamp":1631582371,"share":"https://www.laohu8.com/m/news/1185576409?lang=&edition=full","pubTime":"2021-09-14 09:19","market":"us","language":"en","title":"Apple Rushes to Block Spyware That Doesn’t Need User’s Click","url":"https://stock-news.laohu8.com/highlight/detail?id=1185576409","media":"Bloomberg","summary":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined ","content":"<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.</p>\n<p>The flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.</p>\n<p>The flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.</p>\n<p>“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.</p>\n<p>“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”</p>\n<p>Apple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.</p>\n<p>“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”</p>\n<p>Krstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”</p>\n<p>“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.</p>\n<p>Apple shares were little changed in extended trading after closing at $149.55 in New York.</p>\n<p>The NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”</p>\n<p>NSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.</p>\n<p>In its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”</p>\n<p>In June, the company&nbsp;published&nbsp;its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.</p>\n<p>The White House has raised concerns about NSO Group with senior Israeli officials, the&nbsp;Washington Post reported.</p>\n<p>In December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.</p>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Apple Rushes to Block Spyware That Doesn’t Need User’s Click</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nApple Rushes to Block Spyware That Doesn’t Need User’s Click\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-09-14 09:19 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe ...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"AAPL":"苹果"},"source_url":"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1185576409","content_text":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.\nThe flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.\n“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.\n“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”\nApple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.\n“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”\nKrstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”\n“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.\nApple shares were little changed in extended trading after closing at $149.55 in New York.\nThe NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”\nNSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.\nIn its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”\nIn June, the company published its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.\nThe White House has raised concerns about NSO Group with senior Israeli officials, the Washington Post reported.\nIn December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5860891,"gmtCreate":1631585352958,"gmtModify":1663233849535,"authorId":3557632577472341,"author":{"id":3557632577472341,"authorId":3557632577472341,"name":"sengfuh","avatar":"https://static.tigerbbs.com/221eceb3fd757b12b2f77f2d96659412","vip":1,"crmLevel":3,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":886614110,"type":1,"supId":0,"prevId":0,"content":"Ok","text":"Ok","html":"Ok"}],"langContent":"EN"},{"id":886619084,"gmtCreate":1631584789848,"gmtModify":1676530582357,"author":{"id":"3559859558754319","authorId":"3559859558754319","name":"Bodoh","avatar":"https://static.tigerbbs.com/349218ea2852130ca86ce660b4aa2d59","vip":1,"crmLevel":3,"crmLevelSwitch":0},"htmlText":"Good","listText":"Good","text":"Good","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/886619084","repostId":1185576409,"repostType":4,"repost":{"id":"1185576409","pubTimestamp":1631582371,"share":"https://www.laohu8.com/m/news/1185576409?lang=&edition=full","pubTime":"2021-09-14 09:19","market":"us","language":"en","title":"Apple Rushes to Block Spyware That Doesn’t Need User’s Click","url":"https://stock-news.laohu8.com/highlight/detail?id=1185576409","media":"Bloomberg","summary":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined ","content":"<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.</p>\n<p>The flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.</p>\n<p>The flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.</p>\n<p>“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.</p>\n<p>“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”</p>\n<p>Apple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.</p>\n<p>“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”</p>\n<p>Krstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”</p>\n<p>“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.</p>\n<p>Apple shares were little changed in extended trading after closing at $149.55 in New York.</p>\n<p>The NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”</p>\n<p>NSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.</p>\n<p>In its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”</p>\n<p>In June, the company&nbsp;published&nbsp;its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.</p>\n<p>The White House has raised concerns about NSO Group with senior Israeli officials, the&nbsp;Washington Post reported.</p>\n<p>In December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.</p>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Apple Rushes to Block Spyware That Doesn’t Need User’s Click</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nApple Rushes to Block Spyware That Doesn’t Need User’s Click\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-09-14 09:19 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe ...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"AAPL":"苹果"},"source_url":"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1185576409","content_text":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.\nThe flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.\n“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.\n“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”\nApple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.\n“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”\nKrstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”\n“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.\nApple shares were little changed in extended trading after closing at $149.55 in New York.\nThe NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”\nNSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.\nIn its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”\nIn June, the company published its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.\nThe White House has raised concerns about NSO Group with senior Israeli officials, the Washington Post reported.\nIn December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5860867,"gmtCreate":1631585268448,"gmtModify":1631885761971,"authorId":3586661243815471,"author":{"id":3586661243815471,"authorId":3586661243815471,"name":"tpchng","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":886619084,"type":1,"supId":0,"prevId":0,"content":"good","text":"good","html":"good"}],"langContent":"EN"},{"id":886635040,"gmtCreate":1631584553080,"gmtModify":1676530582269,"author":{"id":"3581450937859419","authorId":"3581450937859419","name":"StreetMoon","avatar":"https://static.tigerbbs.com/66309fcb0dabf3ca68ead8e251963340","vip":1,"crmLevel":2,"crmLevelSwitch":0},"htmlText":"Buy&nbsp;","listText":"Buy&nbsp;","text":"Buy","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":2,"repostSize":0,"link":"https://ttm.financial/post/886635040","repostId":1185576409,"repostType":4,"repost":{"id":"1185576409","pubTimestamp":1631582371,"share":"https://www.laohu8.com/m/news/1185576409?lang=&edition=full","pubTime":"2021-09-14 09:19","market":"us","language":"en","title":"Apple Rushes to Block Spyware That Doesn’t Need User’s Click","url":"https://stock-news.laohu8.com/highlight/detail?id=1185576409","media":"Bloomberg","summary":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined ","content":"<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.</p>\n<p>The flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.</p>\n<p>The flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.</p>\n<p>“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.</p>\n<p>“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”</p>\n<p>Apple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.</p>\n<p>“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”</p>\n<p>Krstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”</p>\n<p>“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.</p>\n<p>Apple shares were little changed in extended trading after closing at $149.55 in New York.</p>\n<p>The NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”</p>\n<p>NSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.</p>\n<p>In its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”</p>\n<p>In June, the company&nbsp;published&nbsp;its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.</p>\n<p>The White House has raised concerns about NSO Group with senior Israeli officials, the&nbsp;Washington Post reported.</p>\n<p>In December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.</p>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Apple Rushes to Block Spyware That Doesn’t Need User’s Click</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nApple Rushes to Block Spyware That Doesn’t Need User’s Click\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-09-14 09:19 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe ...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"AAPL":"苹果"},"source_url":"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1185576409","content_text":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.\nThe flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.\n“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.\n“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”\nApple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.\n“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”\nKrstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”\n“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.\nApple shares were little changed in extended trading after closing at $149.55 in New York.\nThe NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”\nNSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.\nIn its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”\nIn June, the company published its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.\nThe White House has raised concerns about NSO Group with senior Israeli officials, the Washington Post reported.\nIn December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5860757,"gmtCreate":1631584812008,"gmtModify":1663233849536,"authorId":3559859558754319,"author":{"id":3559859558754319,"authorId":3559859558754319,"name":"Bodoh","avatar":"https://static.tigerbbs.com/349218ea2852130ca86ce660b4aa2d59","vip":1,"currentWearingBadge":{"badgeId":"972123088c9646f7b6091ae0662215be-3","templateUuid":"972123088c9646f7b6091ae0662215be","name":"Legendary Trader","description":"Total number of securities or futures transactions reached 300","bigImgUrl":"https://static.tigerbbs.com/656db16598a0b8f21429e10d6c1cb033","smallImgUrl":"https://static.tigerbbs.com/03f10910d4dd9234f9b5702a3342193a","grayImgUrl":"https://static.tigerbbs.com/0c767e35268feb729d50d3fa9a386c5a","redirectLinkEnabled":0,"hasAllocated":1,"isWearing":1,"stampPosition":0,"hasStamp":0,"allocationCount":1,"allocatedDate":"2023.07.14","exceedPercentage":"93.34%","individualDisplayEnabled":0,"individualDisplaySort":0,"categoryType":1100},"crmLevel":3,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":886635040,"type":1,"supId":0,"prevId":0,"content":"Ok","text":"Ok","html":"Ok"},{"id":5861457,"gmtCreate":1631587750344,"gmtModify":1663233849142,"authorId":4091088321144510,"author":{"id":4091088321144510,"authorId":4091088321144510,"name":"JunHaoT","avatar":"https://static.laohu8.com/default-avatar.jpg","vip":1,"crmLevel":2,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":886635040,"type":1,"supId":0,"prevId":0,"content":"<u>Yes</u>","text":"<u>Yes</u>","html":"<u>Yes</u>"}],"langContent":"EN"},{"id":886636199,"gmtCreate":1631584490511,"gmtModify":1676530581973,"author":{"id":"4088815138354210","authorId":"4088815138354210","name":"Al3x","avatar":"https://static.tigerbbs.com/76537eea7f5e56814a3866c383a688d2","vip":1,"crmLevel":1,"crmLevelSwitch":0},"htmlText":"like","listText":"like","text":"like","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":6,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/886636199","repostId":1185576409,"repostType":4,"repost":{"id":"1185576409","pubTimestamp":1631582371,"share":"https://www.laohu8.com/m/news/1185576409?lang=&edition=full","pubTime":"2021-09-14 09:19","market":"us","language":"en","title":"Apple Rushes to Block Spyware That Doesn’t Need User’s Click","url":"https://stock-news.laohu8.com/highlight/detail?id=1185576409","media":"Bloomberg","summary":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined ","content":"<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.</p>\n<p>The flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.</p>\n<p>The flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.</p>\n<p>“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.</p>\n<p>“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”</p>\n<p>Apple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.</p>\n<p>“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”</p>\n<p>Krstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”</p>\n<p>“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.</p>\n<p>Apple shares were little changed in extended trading after closing at $149.55 in New York.</p>\n<p>The NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”</p>\n<p>NSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.</p>\n<p>In its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”</p>\n<p>In June, the company&nbsp;published&nbsp;its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.</p>\n<p>The White House has raised concerns about NSO Group with senior Israeli officials, the&nbsp;Washington Post reported.</p>\n<p>In December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.</p>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Apple Rushes to Block Spyware That Doesn’t Need User’s Click</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nApple Rushes to Block Spyware That Doesn’t Need User’s Click\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-09-14 09:19 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe ...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"AAPL":"苹果"},"source_url":"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1185576409","content_text":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.\nThe flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.\n“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.\n“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”\nApple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.\n“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”\nKrstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”\n“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.\nApple shares were little changed in extended trading after closing at $149.55 in New York.\nThe NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”\nNSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.\nIn its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”\nIn June, the company published its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.\nThe White House has raised concerns about NSO Group with senior Israeli officials, the Washington Post reported.\nIn December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5860753,"gmtCreate":1631584799845,"gmtModify":1663233848838,"authorId":3559859558754319,"author":{"id":3559859558754319,"authorId":3559859558754319,"name":"Bodoh","avatar":"https://static.tigerbbs.com/349218ea2852130ca86ce660b4aa2d59","vip":1,"currentWearingBadge":{"badgeId":"972123088c9646f7b6091ae0662215be-3","templateUuid":"972123088c9646f7b6091ae0662215be","name":"Legendary Trader","description":"Total number of securities or futures transactions reached 300","bigImgUrl":"https://static.tigerbbs.com/656db16598a0b8f21429e10d6c1cb033","smallImgUrl":"https://static.tigerbbs.com/03f10910d4dd9234f9b5702a3342193a","grayImgUrl":"https://static.tigerbbs.com/0c767e35268feb729d50d3fa9a386c5a","redirectLinkEnabled":0,"hasAllocated":1,"isWearing":1,"stampPosition":0,"hasStamp":0,"allocationCount":1,"allocatedDate":"2023.07.14","exceedPercentage":"93.34%","individualDisplayEnabled":0,"individualDisplaySort":0,"categoryType":1100},"crmLevel":3,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":886636199,"type":1,"supId":0,"prevId":0,"content":"Ok","text":"Ok","html":"Ok"}],"langContent":"EN"},{"id":886874857,"gmtCreate":1631582990079,"gmtModify":1676530581374,"author":{"id":"3576231438371359","authorId":"3576231438371359","name":"yl2021","avatar":"https://static.tigerbbs.com/9130003d93212acf586123bc8fe8a1e0","vip":1,"crmLevel":3,"crmLevelSwitch":0},"htmlText":"Pls like &amp; comment","listText":"Pls like &amp; comment","text":"Pls like & comment","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":8,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/886874857","repostId":1185576409,"repostType":4,"repost":{"id":"1185576409","pubTimestamp":1631582371,"share":"https://www.laohu8.com/m/news/1185576409?lang=&edition=full","pubTime":"2021-09-14 09:19","market":"us","language":"en","title":"Apple Rushes to Block Spyware That Doesn’t Need User’s Click","url":"https://stock-news.laohu8.com/highlight/detail?id=1185576409","media":"Bloomberg","summary":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined ","content":"<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.</p>\n<p>The flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.</p>\n<p>The flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.</p>\n<p>“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.</p>\n<p>“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”</p>\n<p>Apple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.</p>\n<p>“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”</p>\n<p>Krstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”</p>\n<p>“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.</p>\n<p>Apple shares were little changed in extended trading after closing at $149.55 in New York.</p>\n<p>The NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”</p>\n<p>NSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.</p>\n<p>In its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”</p>\n<p>In June, the company&nbsp;published&nbsp;its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.</p>\n<p>The White House has raised concerns about NSO Group with senior Israeli officials, the&nbsp;Washington Post reported.</p>\n<p>In December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.</p>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Apple Rushes to Block Spyware That Doesn’t Need User’s Click</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nApple Rushes to Block Spyware That Doesn’t Need User’s Click\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-09-14 09:19 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe ...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"AAPL":"苹果"},"source_url":"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1185576409","content_text":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.\nThe flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.\n“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.\n“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”\nApple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.\n“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”\nKrstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”\n“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.\nApple shares were little changed in extended trading after closing at $149.55 in New York.\nThe NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”\nNSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.\nIn its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”\nIn June, the company published its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.\nThe White House has raised concerns about NSO Group with senior Israeli officials, the Washington Post reported.\nIn December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5860349,"gmtCreate":1631583279375,"gmtModify":1663233846230,"authorId":3579485832735627,"author":{"id":3579485832735627,"authorId":3579485832735627,"name":"Irene104","avatar":"https://static.tigerbbs.com/51a81271b5c1b4f1ca7b728f547fc3ba","vip":1,"crmLevel":3,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":886874857,"type":1,"supId":0,"prevId":0,"content":"Ok","text":"Ok","html":"Ok"}],"langContent":"EN"},{"id":886878065,"gmtCreate":1631582699757,"gmtModify":1676530581203,"author":{"id":"3573976216768090","authorId":"3573976216768090","name":"3nn","avatar":"https://static.tigerbbs.com/303b8f037330070d95adf2f11d86d23a","vip":1,"crmLevel":5,"crmLevelSwitch":0},"htmlText":"Like pls thanks","listText":"Like pls thanks","text":"Like pls thanks","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":4,"commentSize":1,"repostSize":0,"link":"https://ttm.financial/post/886878065","repostId":1185576409,"repostType":4,"repost":{"id":"1185576409","pubTimestamp":1631582371,"share":"https://www.laohu8.com/m/news/1185576409?lang=&edition=full","pubTime":"2021-09-14 09:19","market":"us","language":"en","title":"Apple Rushes to Block Spyware That Doesn’t Need User’s Click","url":"https://stock-news.laohu8.com/highlight/detail?id=1185576409","media":"Bloomberg","summary":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined ","content":"<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.</p>\n<p>The flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.</p>\n<p>The flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.</p>\n<p>“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.</p>\n<p>“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”</p>\n<p>Apple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.</p>\n<p>“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”</p>\n<p>Krstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”</p>\n<p>“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.</p>\n<p>Apple shares were little changed in extended trading after closing at $149.55 in New York.</p>\n<p>The NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”</p>\n<p>NSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.</p>\n<p>In its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”</p>\n<p>In June, the company&nbsp;published&nbsp;its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.</p>\n<p>The White House has raised concerns about NSO Group with senior Israeli officials, the&nbsp;Washington Post reported.</p>\n<p>In December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.</p>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Apple Rushes to Block Spyware That Doesn’t Need User’s Click</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nApple Rushes to Block Spyware That Doesn’t Need User’s Click\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-09-14 09:19 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe ...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"AAPL":"苹果"},"source_url":"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1185576409","content_text":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.\nThe flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.\n“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.\n“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”\nApple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.\n“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”\nKrstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”\n“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.\nApple shares were little changed in extended trading after closing at $149.55 in New York.\nThe NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”\nNSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.\nIn its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”\nIn June, the company published its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.\nThe White House has raised concerns about NSO Group with senior Israeli officials, the Washington Post reported.\nIn December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"comments":[{"id":5860884,"gmtCreate":1631585317281,"gmtModify":1663233846936,"authorId":3585026211789841,"author":{"id":3585026211789841,"authorId":3585026211789841,"name":"Limpek","avatar":"https://static.tigerbbs.com/e38d5e6a0aa567606fd0fd668de77588","vip":1,"crmLevel":1,"crmLevelSwitch":0,"individualDisplayBadges":[]},"repliedAuthorId":0,"objectId":886878065,"type":1,"supId":0,"prevId":0,"content":"Nice","text":"Nice","html":"Nice"}],"langContent":"EN"},{"id":886870461,"gmtCreate":1631582560753,"gmtModify":1676530581142,"author":{"id":"3581931608961006","authorId":"3581931608961006","name":"Ha0","avatar":"https://static.tigerbbs.com/686e76fdb92e536941681fe867222e8d","vip":1,"crmLevel":3,"crmLevelSwitch":0},"htmlText":"good morning","listText":"good morning","text":"good morning","images":[],"top":1,"highlighted":1,"essential":1,"paper":1,"likeSize":3,"commentSize":0,"repostSize":0,"link":"https://ttm.financial/post/886870461","repostId":1185576409,"repostType":4,"repost":{"id":"1185576409","pubTimestamp":1631582371,"share":"https://www.laohu8.com/m/news/1185576409?lang=&edition=full","pubTime":"2021-09-14 09:19","market":"us","language":"en","title":"Apple Rushes to Block Spyware That Doesn’t Need User’s Click","url":"https://stock-news.laohu8.com/highlight/detail?id=1185576409","media":"Bloomberg","summary":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined ","content":"<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.</p>\n<p>The flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.</p>\n<p>The flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.</p>\n<p>“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.</p>\n<p>“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”</p>\n<p>Apple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.</p>\n<p>“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”</p>\n<p>Krstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”</p>\n<p>“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.</p>\n<p>Apple shares were little changed in extended trading after closing at $149.55 in New York.</p>\n<p>The NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”</p>\n<p>NSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.</p>\n<p>In its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”</p>\n<p>In June, the company&nbsp;published&nbsp;its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.</p>\n<p>The White House has raised concerns about NSO Group with senior Israeli officials, the&nbsp;Washington Post reported.</p>\n<p>In December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.</p>","source":"lsy1584095487587","collect":0,"html":"<!DOCTYPE html>\n<html>\n<head>\n<meta http-equiv=\"Content-Type\" content=\"text/html; charset=utf-8\" />\n<meta name=\"viewport\" content=\"width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no\"/>\n<meta name=\"format-detection\" content=\"telephone=no,email=no,address=no\" />\n<title>Apple Rushes to Block Spyware That Doesn’t Need User’s Click</title>\n<style type=\"text/css\">\na,abbr,acronym,address,applet,article,aside,audio,b,big,blockquote,body,canvas,caption,center,cite,code,dd,del,details,dfn,div,dl,dt,\nem,embed,fieldset,figcaption,figure,footer,form,h1,h2,h3,h4,h5,h6,header,hgroup,html,i,iframe,img,ins,kbd,label,legend,li,mark,menu,nav,\nobject,ol,output,p,pre,q,ruby,s,samp,section,small,span,strike,strong,sub,summary,sup,table,tbody,td,tfoot,th,thead,time,tr,tt,u,ul,var,video{ font:inherit;margin:0;padding:0;vertical-align:baseline;border:0 }\nbody{ font-size:16px; line-height:1.5; color:#999; background:transparent; }\n.wrapper{ overflow:hidden;word-break:break-all;padding:10px; }\nh1,h2{ font-weight:normal; line-height:1.35; margin-bottom:.6em; }\nh3,h4,h5,h6{ line-height:1.35; margin-bottom:1em; }\nh1{ font-size:24px; }\nh2{ font-size:20px; }\nh3{ font-size:18px; }\nh4{ font-size:16px; }\nh5{ font-size:14px; }\nh6{ font-size:12px; }\np,ul,ol,blockquote,dl,table{ margin:1.2em 0; }\nul,ol{ margin-left:2em; }\nul{ list-style:disc; }\nol{ list-style:decimal; }\nli,li p{ margin:10px 0;}\nimg{ max-width:100%;display:block;margin:0 auto 1em; }\nblockquote{ color:#B5B2B1; border-left:3px solid #aaa; padding:1em; }\nstrong,b{font-weight:bold;}\nem,i{font-style:italic;}\ntable{ width:100%;border-collapse:collapse;border-spacing:1px;margin:1em 0;font-size:.9em; }\nth,td{ padding:5px;text-align:left;border:1px solid #aaa; }\nth{ font-weight:bold;background:#5d5d5d; }\n.symbol-link{font-weight:bold;}\n/* header{ border-bottom:1px solid #494756; } */\n.title{ margin:0 0 8px;line-height:1.3;color:#ddd; }\n.meta {color:#5e5c6d;font-size:13px;margin:0 0 .5em; }\na{text-decoration:none; color:#2a4b87;}\n.meta .head { display: inline-block; overflow: hidden}\n.head .h-thumb { width: 30px; height: 30px; margin: 0; padding: 0; border-radius: 50%; float: left;}\n.head .h-content { margin: 0; padding: 0 0 0 9px; float: left;}\n.head .h-name {font-size: 13px; color: #eee; margin: 0;}\n.head .h-time {font-size: 11px; color: #7E829C; margin: 0;line-height: 11px;}\n.small {font-size: 12.5px; display: inline-block; transform: scale(0.9); -webkit-transform: scale(0.9); transform-origin: left; -webkit-transform-origin: left;}\n.smaller {font-size: 12.5px; display: inline-block; transform: scale(0.8); -webkit-transform: scale(0.8); transform-origin: left; -webkit-transform-origin: left;}\n.bt-text {font-size: 12px;margin: 1.5em 0 0 0}\n.bt-text p {margin: 0}\n</style>\n</head>\n<body>\n<div class=\"wrapper\">\n<header>\n<h2 class=\"title\">\nApple Rushes to Block Spyware That Doesn’t Need User’s Click\n</h2>\n\n<h4 class=\"meta\">\n\n\n2021-09-14 09:19 GMT+8&nbsp;&nbsp;&nbsp;<a href=https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones><strong>Bloomberg</strong></a>\n\n\n</h4>\n\n</header>\n<article>\n<div>\n<p>Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe ...</p>\n\n<a href=\"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones\">Web Link</a>\n\n</div>\n\n\n</article>\n</div>\n</body>\n</html>\n","type":0,"thumbnail":"","relate_stocks":{"AAPL":"苹果"},"source_url":"https://www.bloomberg.com/news/articles/2021-09-13/apple-fixes-security-bug-that-could-let-hackers-take-over-phones","is_english":true,"share_image_url":"https://static.laohu8.com/e9f99090a1c2ed51c021029395664489","article_id":"1185576409","content_text":"Apple Inc.said it patched a security flaw in its Messages app after security researchers determined that Israel-based NSO Group used it to “exploit and infect” the latest devices with spyware.\nThe flaw, disclosed Monday by Citizen Lab, allowed a hacker using NSO’s Pegasus malware to gain access to a device owned by an unnamed Saudi activist, according to security researchers. Apple said the flaw could be exploited if a user on a vulnerable device received a “maliciously crafted” PDF file.\nThe flaw was a “zero-day” vulnerability, a term that refers to recently discovered bugs that hackers can exploit and haven’t yet been patched. Victims didn’t have to click on the malicious file for it to infect their devices, something known as a “zero-click” exploit, according to a report released by Citizen Lab, a cyber-research unit of the University of Toronto.\n“What this highlights is that chat apps are the soft underbelly of device security,” John Scott-Railton, senior researcher at Citizen Lab, said in a text message. “They are ubiquitous, which makes them really attractive, so they are an increasingly common target for attackers.\n“They need to be a major priority for security,” he added. “Narrowing the attack surface from chat apps will go a long way toward making all of our devices more secure.”\nApple is patching the bug on the iPhone, iPad, Mac and Apple Watch via iOS 14.8, iPadOS 14.8, macOS 11.6 and watchOS 7.6.2 software updates. The software releases came the day before a highly anticipated Apple product launch event on Tuesday. The company is expected to announce the release date for iOS 15, Apple’s next major software update, which will contain additional security protections.\n“After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” Ivan Krstić, head of security engineering and architecture at Apple, said in a statement. “We’d like to commend Citizen Lab for successfully completing the very difficult work of obtaining a sample of this exploit so we could develop this fix quickly.”\nKrstić added that attacks like this one are “highly sophisticated, cost millions of dollars to develop, often have a short shelf life and are used to target specific individuals.”\n“While that means they are not a threat to the overwhelming majority of our users, we continue to work tirelessly to defend all our customers, and we are constantly adding new protections for their devices and data,” he said.\nApple shares were little changed in extended trading after closing at $149.55 in New York.\nThe NSO Group has been the subject of repeated criticism by Citizen Lab and other organizations after its spyware has been discovered on the phones of activists and journalists critical of repressive regimes. In its report Monday, Citizen Lab accused NSO Group of facilitating “despotism-as-a-service for unaccountable government security agencies” and argued that regulation is “desperately needed.”\nNSO Group has insisted that the spyware is intended to be used to fight terrorism and crime, not to aid in human rights abuses.\nIn its own statement, NSO Group said the company “will continue to provide intelligence and law enforcement agencies around the world with life saving technologies.”\nIn June, the company published its first “Transparency and Responsibility Report,” which defended its technology and efforts to curb misuse by customers.\nThe White House has raised concerns about NSO Group with senior Israeli officials, the Washington Post reported.\nIn December, Citizen Labreportedthat NSO spyware was used to target the devices of 36 Al Jazeera employees. Citizen Lab said that it believed the hacks were carried out on behalf of Saudi Arabia and the United Arab Emirates. The hack in 2020 is similar to the one disclosed Monday because it didn’t require the victim to click on a malicious link, meaning there is no way to defend from the hack. NSO Group denied the report.","news_type":1},"isVote":1,"likeStatus":false,"favoriteStatus":false,"reportStatus":false,"tweetType":1,"langContent":"EN"}],"hasMoreComments":true,"newsSizeData":{"likeSize":106,"commentSize":0,"repostSize":0,"favoriteSize":0,"likeStatus":false,"favoriteStatus":false}}