iOS 16.6.1 fixes two vulnerabilities known to be actively exploited in the wild

Re:iOS 16.6.1 fixes two vulnerabilities known to be actively... by 0cf8612b2e1e on Thursday September 07, 2023 @04:50PM (#37425368)

In general, are these exploits in memory only? If I reboot my phone, is that likely to impact anything? Or is it usually possible to persist them to the file system?

[ Parent | on HN ]

Re:iOS 16.6.1 fixes two vulnerabilities known to be actively... by l33t7332273 on Thursday September 07, 2023 @05:00PM (#37425520)

In general they are in memory only. However, if the exploit is from iMessage parsing an image, this may happen whenever you run the app.

Regardless, persistence is hard, which is why NSA and others recommend shutting off your phone at least once per week.

[ Parent | on HN ]

Re:iOS 16.6.1 fixes two vulnerabilities known to be actively... by ReptileMan on Thursday September 07, 2023 @04:53PM (#37425423)

You have secure chain of boot so you can't launch the malicious stuff on boot.

But - this doesn't prevent you once you have root to modify some app and system settings for the phone to reinfect itself eventually (proxies, vpn, who knows what)

[ Parent | on HN ]