The researcher, who tweets under the name Sabri, posted the 15-lines of code needed to exploit the flaw to Github on Sept. 15. In addition to affecting iOS devices the CSS can also force Safari to hang, but otherwise, it is benign and cannot be used as an avenue of attack Sabri said on Twitter.The code exploits a flaw in the iOS' Webkit.
Sabri told TechCrunch, “that nesting a ton of elements — such as <div> tags — inside a backdrop filter property in CSS, you can use up all of the device’s resources and cause a kernel panic, which shuts down and restarts the operating system to prevent damage.”The restart can be activated by intentionally running the code on the device or having someone send a link to a site with the code or an email, he told TechCrunch.
There are many ways to do DevSecOps, and each organization — each security team, even — uses a different approach. Questions such as how many environments you have and the frequency of deployment of those environments are important in understanding how to integrate a security scanner into your DevSecOps machinery. The ultimate goal is speed […]
It’s Cybersecurity Awareness Month, but security awareness is about much more than just dedicating a month to a few activities. Security awareness is a journey, requiring motivation along the way. And culture. Especially culture.That’s the point Proofpoint Cybersecurity Evangelist Brian Reed drove home in a recent appearance on Business Security Weekly.“If your security awareness program […]
Get daily email updates
SC Media's daily must-read of the most current and pressing daily news
