Enhance cybersecurity awareness and survivability for DoD, industry partners, and academia in the face of the ever-increasing threat of cyber attacks. Cybersecurity (CS) includes managing risks related to the use, processing, storage, and transmission of information and the systems and processes used for those purposes, including analog and physical form. CS includes information availability, identification and authentication, confidentiality, integrity, and non-repudiation as well as the economic considerations with respect to selection of CS techniques, CS processes, and industry trends.
iOS Bug Prevents VPNs From Encrypting All Traffic
This topic contains 1 reply, has 1 voice, and was last updated by 
-
Topic
-
Proton VPN found a bug in iOS 13.3.1 and later that prevents VPNs from encrypting all internet traffic. Previously established internet connections remain outside the VPN tunnel which can lead to data or IP address leakage. Connections made after the VPN has been established are fully encrypted.
-
Replies
-
Apple iOS users served mobile malware in Poisoned News campaign
Apple iOS smartphone users in Hong Kong are being targeted in a new campaign exploiting online news readers to serve malware. Newly-registered members of the discussion forums would post links generally related to sex, clickbait headlines, and COVID-19. The links do actually lead to legitimate news outlets however, a watering hole attack uses a hidden iframe to deploy and execute malicious code. The URLs used led to a malicious website created by the attacker, which contain three iframes that pointed to different sites. The only visible iframe leads to a legitimate news site, which makes people believe they are visiting the site they searched. One invisible iframe was used for website analytics, while the other led to a site hosting the main script of the iOS exploits.
You must be logged in to reply to this topic.
