0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft

Comments (1)

pabs3 · 1d ago

From the post:

This is a strategic public disclosure of a zero-click iMessage exploit chain that was discovered live on iOS 18.2 and remained unpatched through iOS 18.4. It enabled Secure Enclave key theft, wormable remote code execution, and undetectable crypto wallet exfiltration. Despite responsible disclosure, the research was suppressed by the vendor. Apple issued a silent fix in iOS 18.4.1 (April 2025) without public acknowledgment or credit.

The Gratitude Calendar (thegratitudecalendar.com)

Show HN: BrowserTotal: A framework for analyzing browser security posture (browsertotal.com)

Show HN: I built a Free tool that explains anything like you're 5 using GPT (explaintome.netlify.app)

Show HN: I built an app to calculate body type and generate AI fitness plans (mybodytype.net)

Automatic Migration for SQLite

Notable People (tjukanovt.github.io)

Show HN: Kete – Orbit prediction for asteroids/comets (github.com)

A Lightweight Merge Queue Using GitHub Actions (sketch.dev)

Automatically create a Dark Mode from your existing Emacs theme (github.com)

Task Manager "Game Console" on Azure Memory Optimized Servers [video] (youtube.com)

Danish Ministry Replaces Windows and Microsoft Office with Linux and LibreOffice (heise.de)

Agents for the Agent (ampcode.com)

AI identifies key gene sets that cause complex disease (news.northwestern.edu)

God is a Parasite: An unrated manifesto on interfacing with intelligence (jasonyuan.substack.com)

Show HN: Gridogram – A quote for each day, hidden in a compact grid (gridogram.com)

Minister of International Trade says Canada should apply for EU (thebeaverton.com)

Why do Bedouins wear black robes in hot deserts? (1980) (nature.com)

Ruby on Rails Audit Complete (ostif.org)

Tesla Australia owner class action over phantom braking, battery and Autopilot (drive.com.au)

CRW Flags Inc (crwflags.com)

Seaweed APT2: a real-time, interactive, streaming video generation model (seaweed-apt.com)

Difference between alerts and notiifcations in UI design (component wise)

Show HN: Apple's new "Liquid Glass" effect as a Svelte component (npmjs.com)

Async Compute All the Things (interplayoflight.wordpress.com)

True Love (rxjourney.net)

OmniPainter: Training-Free Stylized Text-to-Image Generation with Fast Inference (github.com)

Optimize CPU performance with Instruments – M4 branch level tracing [video] (developer.apple.com)

Apple Liquid Glass Using WebGL Shaders (github.com)

How much EU is in DNS4EU? (techlog.jenslink.net)

LibreChat: Enhanced ChatGPT Clone (github.com)

All RAG Techniques: A Simpler, Hands-On Approach (github.com)

Using SQL in Node.js with Sequelize (blog.appsignal.com)

Partcrafter: Structured 3D Mesh Generation (wgsxm.github.io)

The Texting Network for the End of the World – Meshtastic (wired.com)

Manticore Search 10.1.0 (manticoresearch.com)

Notes on Managing ADHD (borretti.me)

Compound (Enclosure) (en.wikipedia.org)

Ask HN: What work-life lesson did you learn the hard way?

Do Stonks Go Up? (entropicthoughts.com)

C++26: Disallow Binding a Returned Reference to a Temporary (sandordargo.com)

Ruby Gem Naming: The Art of Delightful Obscurity (stevengharms.com)

Show HN: AI challenge – generate ECX = 0x08C0C166 with no memory, no immediates

It turns out there's truth to 'dead battery bounce' after all (theconversation.com)

The curse of Toumaï: an ancient skull and a feud over humanity's origins (theguardian.com)

Show HN: I Vibe-Coded a Notepad

"How slow is the tracing interpreter of PyPy's meta-tracing JIT?" (cfbolz.de)

Why doesn't AWS Bedrock EU-west-2 have the latest Claude models available?

Build a minimal decorator with Ruby in 30 minutes (remimercier.com)

How I Use Claude Code (spiess.dev)

Sam Altman's Lies About ChatGPT Are Growing Bolder (gizmodo.com)

0-Click iMessage Chain → Secure Enclave Key Theft, Wormable RCE, Crypto Theft

Comments (1)