The 19th annual CanSecWest security conference is underway in Vancouver, Canada, including the annual Pwn2Own hacking contest, and two zero-day security vulnerabilities have so far been discovered in Safari on macOS.
The contest kicked off on Wednesday with security researchers Amat Cama and Richard Zhu teaming up against Safari. The duo successfully exploited the browser and escaped the sandbox by using a combination of an integer overflow, heap overflow, and brute force technique, earning them $55,000.
Later in the day, a trio of Niklas Baumstark, Luca Todesco, and Bruno Keith targeted Safari with a kernel elevation. They demonstrated a complete system compromise, but it was only a partial win since Apple supposedly already knew of one of the bugs used in the demo. They still netted $45,000.
In total, participants were awarded $240,000 on day one of Pwn2Own. Day two of the contest is currently underway. All exploits discovered during the contest are reported to the necessary companies like Apple so they can be patched.
The contest kicked off on Wednesday with security researchers Amat Cama and Richard Zhu teaming up against Safari. The duo successfully exploited the browser and escaped the sandbox by using a combination of an integer overflow, heap overflow, and brute force technique, earning them $55,000.
Later in the day, a trio of Niklas Baumstark, Luca Todesco, and Bruno Keith targeted Safari with a kernel elevation. They demonstrated a complete system compromise, but it was only a partial win since Apple supposedly already knew of one of the bugs used in the demo. They still netted $45,000.
In total, participants were awarded $240,000 on day one of Pwn2Own. Day two of the contest is currently underway. All exploits discovered during the contest are reported to the necessary companies like Apple so they can be patched.
23 comments
Apple may release a Smart Keyboard with a scissor switch design for its next-generation iPad or iPad Pro models, suggests Taiwanese industry publication DigiTimes, although full details are not...
More than two years ago, Apple informed the FBI that it planned to roll out end-to-end encryption for iCloud backups, according to Reuters. Apple ultimately dropped the plan at some point after the...
Disney+ is coming to Europe sooner than we thought. Ireland, France, Germany, Italy, Spain, Austria, Switzerland, and the United Kingdom will now get the streaming service on March 24, Disney...
Apple is widely rumored to release four new iPhones in the fall, including one 5.4-inch model, two 6.1-inch models, and one 6.7-inch model, and Japanese blog Mac Otakara has offered a few details...
Apple today began selling certified refurbished iPhone XS and iPhone XS Max models for the first time since the devices were released in September 2018.
At the time of writing, the refurbished...
Starting in February, Apple is hosting its annual company wide fitness challenge for all of its employees, tasking them with closing all three Apple Watch Activity rings every day of the month.
...
Tim Cook visited Ireland today to collect an award from Taoiseach Leo Varadkar for Apple's 40 years of investment in the country. Apple's CEO also met with Irish musician Hozier and...
A former Apple executive who worked on the chips that power iPhones and iPads has had a request to toss a breach-of-contract lawsuit brought by the company rejected by the court in a tentative...
