13.11.2013 19:05 Uhr, Quelle: Macworld UK

iPhone 5, Galaxy S4 zero-day exploits revealed at HP Pwn2Own contest

Two teams of Japanese "white hat" hackers have been declared victors at HP's Pwn2Own 2013 contest in Tokyo today for finding zero-day exploits that allowed them to compromise the Apple iPhone 5 and the Samsung Galaxy S4.HP has just reported to Apple and Samsung how these exploits were carried out by the Keen Team and Mitsui Bussan Secure Directions team, respectively, so that fixes can be made. The Keen Team won $27,500 from HP for its efforts, and the Mitsui Bussan Secure Directions team won $40,000. Neither HP nor the winning teams will make the exact exploits available publicly.The vulnerability discovered in the iPhone 5 using iOS 7 is an exploit against the Safari browser that lets the attacker "weaponize" the victim's phone by compromising it to steal contact data, photos, or carry out attacks such as taking over the victim's Facebook page, says Brian Gorenc, manager of vulnerability research in HP's security division for zero-day re

Weiterlesen bei Macworld UK