Aggregator

"There has never been a successful, widespread malware attack against iPhone," notes Apple's security blog, pointing out that "The only system-level iOS attacks we observe in the wild come from mercenary spyware... historically associated with state actors and [using] exploit chains that cost millions of dollars..." But they're doing something about it — this week announcing a new always-on memory-safety protection in the iPhone 17 lineup and iPhone Air (including the kernel and over 70 userland processes)... Known mercenary spyware chains used against iOS share a common denominator with those targeting Windows and Android: they exploit memory safety vulnerabilities, which are interchangeable, powerful, and exist throughout the industry... For Apple, improving memory safety is a broad effort that includes developing with safe languages and deploying mitigations at scale... Our analysis found that, when employed as a real-time defensive measure, the original Arm Memory Tagging Extension (MTE) release exhibited weaknesses that were unacceptable to us, and we worked with Arm to address these shortcomings in the new Enhanced Memory Tagging Extension (EMTE) specification, released in 2022. More importantly, our analysis showed that while EMTE had great potential as specified, a rigorous implementation with deep hardware and operating system support could be a breakthrough that produces an extraordinary new security mechanism.... Ultimately, we determined that to deliver truly best-in-class memory safety, we would carry out a massive engineering effort spanning all of Apple — including updates to Apple silicon, our operating systems, and our software frameworks. This effort, together with our highly successful secure memory allocator work, would transform MTE from a helpful debugging tool into a groundbreaking new security feature. Today we're introducing the culmination of this effort: Memory Integrity Enforcement (MIE), our comprehensive memory safety defense for Apple platforms. Memory Integrity Enforcement is built on the robust foundation provided by our secure memory allocators, coupled with Enhanced Memory Tagging Extension (EMTE) in synchronous mode, and supported by extensive Tag Confidentiality Enforcement policies. MIE is built right into Apple hardware and software in all models of iPhone 17 and iPhone Air and offers unparalleled, always-on memory safety protection for our key attack surfaces including the kernel, while maintaining the power and performance that users expect. In addition, we're making EMTE available to all Apple developers in Xcode as part of the new Enhanced Security feature that we released earlier this year during WWDC... Based on our evaluations pitting Memory Integrity Enforcement against exceptionally sophisticated mercenary spyware attacks from the last three years, we believe MIE will make exploit chains significantly more expensive and difficult to develop and maintain, disrupt many of the most effective exploitation techniques from the last 25 years, and completely redefine the landscape of memory safety for Apple products. Because of how dramatically it reduces an attacker's ability to exploit memory corruption vulnerabilities on our devices, we believe Memory Integrity Enforcement represents the most significant upgrade to memory safety in the history of consumer operating systems.

Read more of this story at Slashdot.

Women with type 2 diabetes should consider switching their HRT tablets to patches to reduce their risk of potentially fatal blood clots, according to a new study.

He worked on their theme song for their show and also penned Last Train to Clarksville as well as (I'm Not Your) Steppin' Stone.

'Devastated' Liam Gallagher has paid tribute to boxer Ricky Hatton after his death aged 46.

Chris Martin has garnered backlash from some fans after he halted his concert at Wembley Stadium to send love to Charlie Kirk's family.

'I know there's heartbreaking stuff that's been happening right now, but I want this night to be an escape and I think that's why I was brought on.'

One of HGTV's most popular faces found herself in the middle of a social media firestorm after facing backlash for comments about the death of conservative activist Charlie Kirk.

The soul singer, 38, has recently revealed she is preparing to return to the UK more than decade after fleeing to America in light of the terrifying plot to 'decapitate' her with a samurai sword.

The broadcast journalist, 58, took to Instagram on Sunday to share that she had spent the day in her car driving her daughter, 19, back to uni.

Adeeb Nasir, 58, and Adil Justice Ahme Nasir, 31, were arrested Sunday in Salt Lake City, Utah for allegedly placing a live bomb underneath a news media vehicle on Friday.

Due to appear on the upcoming Strictly Come Dancing, the Love Island winner, 29, revealed to the Mail that Danny, 48, had been asked to go on the BBC dance show but turned it down.

Flight attendant Florence Chesson said she was diagnosed with traumatic brain injury and damage to her nervous system after inhaling fumes leaked from the jet engine.

Recently, I reached the point where it might be time to admit I needed to reach for injectable fat loss drugs. The problem is, I don't like needles, or drugs. But could there be a third way?

Adolescence star Owen Cooper was surprised by his acting idol Jake Gyllenhaal ahead of the Emmys on Sunday - as the star gifted him a good luck token

The music producer, 50, has recalled in his new book attending, at the age of 13, a party at the singer's hotel room.

The oldest person living in Japan is 114 years old, reports the BBC. But "The number of people in Japan aged 100 or older has risen to a record high of nearly 100,000, its government has announced." Setting a new record for the 55th year in a row, the number of centenarians in Japan was 99,763 as of September, the health ministry said on Friday. Of that total, women accounted for an overwhelming 88%... Health minister Takamaro Fukoka congratulated the 87,784 female and 11,979 male centenarians on their longevity and expressed his "gratitude for their many years of contributions to the development of society".... The higher life expectancy is mainly attributed to fewer deaths from heart disease and common forms of cancer, in particular breast and prostate cancer. Japan has low rates of obesity, a major contributing factor to both diseases, thanks to diets low in red meat and high in fish and vegetables. The obesity rate is particularly low for women, which could go some way to explaining why Japanese women have a much higher life expectancy than their male counterparts... But it's not just diet. Japanese people tend to stay active into later life, walking and using public transport more than elderly people in the US and Europe... However, several studies have cast doubt on the validity of global centenarian numbers, suggesting data errors, unreliable public records and missing birth certificates may account for elevated figures. A government audit of family registries in Japan in 2010 uncovered more than 230,000 people listed as being aged 100 or older who were unaccounted for, some having in fact died decades previously. The miscounting was attributed to patchy record-keeping and suspicions that some families may have tried to hide the deaths of elderly relatives in order to claim their pensions.

Read more of this story at Slashdot.

It takes most artists decades in the spotlight to accrue fashion deals with famous designers, land breakout TV parts and snag leading Broadway roles. But 22-year-old Lola Tung has now got them all.

The 77th Emmy Awards will take place at the Peacock Theater in Los Angeles on Sunday.  Early on Sunday stars were already seen getting ready for TV's biggest night.

An insider has exclusively told Daily Mail the truth behind why these women 'don't have a close friendship' despite their partners always being snapped spending time together.

Sirens sounded and an air raid threat was declared as Warsaw announced Polish and allied fighter jets were operating due to Russian drones buzzing border regions of Ukraine.