ZecOps Blog
blog.zecops.com · Company blog · on HN since 2019
ZecOps is a mobile security firm whose blog publishes technical write-ups of iOS and other zero-click vulnerabilities and exploits.
What HN saysHN commenters cite it as a source for concrete bugs: the iOS Mail 0-click flaw, the NoReboot persistence trick, and a macOS privilege escalation traced to a code comment.
16HN people shared it
7linked it in comments
9stories submitted
344story points
3 years agolast shared
2019people per year2026
Most-shared posts
- 1iOS Mail Vulnerability4 people · 2 points · first shared 2020 · discussion on HN
- 2You’ve Got 0-Click Mail: Unassisted iOS Attacks RCE via Mobilemail/Maild3 people · 273 points · first shared 2020 · 128 comments on HN
- 3The Ultimate Persistence Bug Noreboot2 people · 3 points · first shared 2022 · discussion on HN
- 4WiFiDemon – iOS WiFi RCE 0-Day Vuln, and a Zero-Click Vuln That Was Patched1 people · 51 points · first shared 2021 · 6 comments on HN
- 5NTFS Remote Code Execution (CVE-2020-17096) Analysi1 people · 8 points · first shared 2021 · 1 comments on HN
- 6Task for Pwn Zero1 people · 3 points · first shared 2019 · 1 comments on HN
- 7Exploring the Exploitability of “Bad Neighbor”: The Recent ICMPv6 Vulnerability1 people · 2 points · first shared 2020 · discussion on HN
- 8Seeing (Mail)Demons? Technique, Triggers, and a Bounty1 people · 2 points · first shared 2020 · discussion on HN
- 9From a comment to a cve content filter strikes again1 people · first shared 2021
- 10Analyzing the ios telugu crash part i1 people · first shared 2021
What HN people wrote when they linked it
_kbh_ · 2021-05-17
for a great example of this just have a look at the following macOS privesc the source of which came with the handy comment "deal with OOB".
https://blog.zecops.com/research/from-a-comment-to-a-cve-content-filte…
sp332 · 2023-10-28
Long-pressing an iPhone power button brings up Siri. And malware can diguise the behavior of an iPhone to pretend that it rebooted. https://blog.zecops.com/research/persistence-without-persistence-meet-…
mitemte · 2021-09-07
Depends where the vulnerability lies. Plenty of iMessage DoS attacks [1-4] have targeted CoreText, which, I believe is written in C and CoreFoundation. I think all of these DoS attacks could be mitigated by not viewing the message and disabling message previews in notifications.
[1] https://habr.com/ru/post/191654/
[2] https://appleinsider.com/articles/15/05/27/bug-in-ios-notifications-ha…
[3] https://blog.zecops.com/research/analyzing-the-ios-telugu-crash-part-i…
[4] https://www.macrumors.com/2018/05/09/how-to-fix-black-dot-imessage-cra…
ValentineC · 2020-05-24
> “A device capable of installing unverified software with an increased potential to introduce security vulnerabilities into the OS” is another.
The jailbreak community is usually quick in introducing patches for security vulnerabilities.
The most recent Mail bug [1] had a patch released 29 days ago [2]. Apple only introduced a fix in a 13.4.5 beta, and it's unsure if the same fix was put into 13.5 [3].
Admittedly, it'll be even better if the community strongly encouraged the installation of such tweaks in Cydia et al.
[1] https://blog.zecops.com/vulnerabilities/youve-got-0-click-mail/
[2] https://www.reddit.com/r/jailbreak/comments/g7eujh/release_mailpatch_p…
[3] https://support.apple.com/en-us/HT210393#135
TheMog · 2020-05-18
This is the specific one I was thinking of: https://blog.zecops.com/vulnerabilities/youve-got-0-click-mail/
At least the BSI in Germany seems to think it’s serious enough to warn people about it (sorry, no English language link for this): https://www.heise.de/mac-and-i/meldung/Mail-Bugs-BSI-warnt-vor-iOS-470…
notRobot · 2020-04-22
What is it with news outlets never linking the documents or websites that they keep quoting from?
Post: https://blog.zecops.com/vulnerabilities/unassisted-ios-attacks-via-mob…
HN discussion: https://news.ycombinator.com/item?id=22944690
tlb · 2020-04-22
Technical details at https://blog.zecops.com/vulnerabilities/unassisted-ios-attacks-via-mob…