You are using an out of date browser. It may not display this or other websites correctly. You should upgrade or use an alternative browser.
ios security
About this tag
The ios security tag on WindowsForum.com covers vulnerabilities and threats affecting Apple's iOS platform, with a focus on cross-platform security issues involving Microsoft products. Discussions include zero-day exploits in iOS alongside Windows, such as the NTLM hash-leaking vulnerability CVE-2025-24054, which was rapidly weaponized after disclosure. Specific iOS vulnerabilities are examined, including CVE-2025-25001 and CVE-2025-29796 in Microsoft Edge for iOS, which enable spoofing and cross-site scripting attacks, and CVE-2024-43482 in Microsoft Outlook for iOS, an information disclosure flaw. The tag also addresses emerging threats like Agentic AI malware targeting mobile devices. Topics emphasize the importance of patching, understanding legacy protocol risks, and defending against sophisticated attacks on iOS devices in enterprise and consumer contexts.
The rise of Agentic AI Assistants—powerful digital agents that can perceive, interpret, and act on behalf of users—has revolutionized the mobile landscape, ushering in an unprecedented era of convenience, productivity, and automation. Yet, with every technological advance comes an accompanying...
Microsoft's March and April 2025 Patch Tuesday updates have revealed and addressed a troubling development in cybersecurity: the rapid weaponization of a "less likely to be exploited" NTLM hash-leaking vulnerability, CVE-2025-24054, alongside other critical zero-day flaws emerging in both...
Microsoft's Patch Tuesday on March 11, 2025, introduced crucial security updates, among them a vulnerability labeled CVE-2025-24054 impacting the NTLM authentication protocol. Though Microsoft initially rated this vulnerability as "less likely" to be exploited, reality quickly contradicted that...
Microsoft's March 2025 Patch Tuesday brought an extensive lineup of bug fixes, but among these was a vulnerability that would quickly escalate into a significant security incident: CVE-2025-24054, an NTLM hash-leaking flaw. While Microsoft initially considered this vulnerability "less likely" to...
Microsoft's Patch Tuesday updates in March 2025 unveiled a significant security challenge tied to the legacy NTLM protocol widely used across Windows environments. Despite Microsoft's rating of the vulnerability CVE-2025-24054 as "less likely" to be exploited, threat actors demonstrated their...
Improper input handling has long been the bane of browser security, and the latest CVE-2025-25001 issue in Microsoft Edge for iOS is no exception. This vulnerability, rooted in the improper neutralization of input during web page generation, opens the door for cross-site scripting (XSS) attacks...
Microsoft Edge for iOS isn’t just about sleek design and fast performance anymore—its latest security hiccup reminds us that even top-tier browsers can fall prey to subtle yet dangerous exploits. Recent findings have highlighted CVE-2025-29796, a spoofing vulnerability in Microsoft Edge for iOS...
Introduction: What Happened? The recent discovery of CVE-2024-43482 highlights a significant information disclosure vulnerability in Microsoft Outlook for iOS. Published by the Microsoft Security Response Center (MSRC) on September 10, 2024, this vulnerability adds to the growing list of...
Updated An analysis of iOS by a security expert has highlighted various tools in the operating system that could be used for surveillance.
Jonathan Zdziarski concluded that the vast majority of iThing owners are unaware of lax mechanisms protecting their data...
iPhone Hacked Fast at Pwn2Own 2010
An iPhone got hacked in just 20 seconds at this week’s Pwn2Own hacking contest at CanSecWest 2010, along with Internet Explorer 8, and Apple’s Safari browser. DV Labs sponsors the annual hacking contest where if you successfully exploit a target you get to...