Apple Privilege Escalation Bug Let Attacker Execute Arbitrary Code

Trellix researchers discovered a new class of privilege escalation bugs based on the ForcedEntry attack, which exploited a feature of macOS and iOS to deploy the NSO Group’s mobile Pegasus malware. The new class of bugs allows arbitrary code to be executed in the context of several platform applications, resulting in privilege escalation and sandbox […]

The post <strong>Apple Privilege Escalation Bug Let Attacker Execute Arbitrary Code</strong> appeared first on GBHackers - Latest Cyber Security News | Hacker News.

apple applications attack bug bugs class code context cyber security escalation exploited forcedentry ios macos malware mobile nso nso group pegasus pegasus malware platform privilege privilege escalation researchers sandbox trellix