Remove Linux Remove Open Source Remove Spyware Remove Windows
article thumbnail

CVE-2023-41064, CVE-2023-4863, CVE-2023-5129: Frequently Asked Questions for ImageIO and WebP/libwebp Zero-Day Vulnerabilities

Tenable

Frequently asked questions relating to vulnerabilities in Apple, Google and the open source libwebp library. On September 7, researchers at Citizen Lab published a blog post detailing their discovery of an iPhone zero-click, zero-day exploit chain in Apple iOS used to deploy a spyware known as Pegasus. What is WebP or libwebp?

article thumbnail

Hidden inside Dark Caracal’s espionage apps: Old tech

The Parallax

Dark Caracal’s custom-developed mobile spyware, which the report’s authors call Pallas, is the first documented global advanced persistent threat , or APT, on a mobile device. . “ If you had even a little mobile development experience, [Dark Caracal] could cost less than $1,000.”—Michael

Malware 170