Links submitted by the Threat Radar community and AI curated for defenders.

Community Curated

Reddit Cybersecurity

Reddit NetSec

ThreatFox MISP Feed

CIRCL OSINT Feed

NCSC UK

JVN Japan

GCP Compute Engine Security

GCP Kubernetes Security

AWS Security Bulletins

CERT/CC

Tenable Research

Google Project Zero

Microsoft Security Blog

Cisco Talos

Zero Day Initiative

Palo Alto Unit 42

Krebs on Security

Kaspersky Security Blog

Check Point Research

GCVE Database

CVE Database V5

AlienVault OTX General

Real-world exploitation and exposure telemetry from the OffSeq Mirage honeypot fleet and Sonar internet scans — which CVEs attackers are actually exploiting and which are exposed in the wild, plus attacker IoCs. All IPs are masked; no raw victim or sensor identity is ever published.

OffSeq Mirage

SANS ISC Handlers Diary

SecurityWeek

Threatpost

Latest exploits, shellcode, and vulnerability proofs-of-concept from Exploit-DB

Exploit-DB RSS Feed

Reddit ExploitDev

Reddit BlueTeam

Reddit ThreatIntel

Reddit Malware

Reddit Reverse Engineering

Bleeping Computer

Reddit InfoSec News

The Hacker News

Dark Reading

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

An authorization issue was addressed with improved state management. This issue is fixed in macOS Ventura 13.6, tvOS 17, iOS 16.7 and iPadOS 16.7, macOS Monterey 12.7, watchOS 10, iOS 17 and iPadOS 17, macOS Sonoma 14. An app may be able to access protected user data.

CVE-2023-41073 is an authorization vulnerability identified in Apple’s iOS and iPadOS platforms, where an application may gain access to protected user data improperly. The root cause is an authorization flaw related to inadequate state management within the operating system, which could allow malicious or compromised apps to bypass normal access controls. This vulnerability affects multiple Apple operating systems, including iOS, iPadOS, macOS, tvOS, and watchOS, with patches released in versions such as iOS 16.7, iOS 17, iPadOS 16.7, iPadOS 17, macOS Ventura 13.6, macOS Monterey 12.7, macOS Sonoma 14, tvOS 17, and watchOS 10. The vulnerability was publicly disclosed on September 26, 2023, with no known active exploits reported in the wild. The issue could lead to unauthorized disclosure of sensitive user data, undermining user privacy and potentially exposing confidential information to malicious actors. Since the vulnerability does not require user interaction or authentication, it presents a significant risk if exploited. Apple’s fix involves improved state management to enforce proper authorization checks, preventing apps from accessing data they should not. The lack of a CVSS score necessitates an expert severity assessment based on the impact and exploitability characteristics.

Detailed information about CVE-2023-41073: An app may be able to access protected user data in Apple iOS and iPadOS affecting Apple iOS and iPadOS. Get real-tim

CVE-2023-41073: An app may be able to access protected user data in Apple iOS and iPadOS - Live Threat Intelligence - Threat Radar | OffSeq.com

CVE-2023-41073: An app may be able to access protected user data in Apple iOS and iPadOS

Threats Tagged 'cve-2023-41073'

Stop chasing alerts. Route them.

Check if your credentials are on the dark web

Filter Threats

Threats Tagged 'cve-2023-41073'

Lead Pen Test Professional