{"metadata": {"vulnerability": "CVE-2023-41991", "count": 86, "kinds": {"milestone": 9, "sighting": 32, "kev": 11, "other": 34}}, "data": [{"timestamp": "2023-09-06T17:40:06.142Z", "date_only": false, "value": "2023-09-06T17:40:06.142Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2023-41991", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-09-21T18:23:48.974Z", "date_only": false, "value": "2023-09-21T18:23:48.974Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2023-41991", "field": "cveMetadata.datePublished"}, {"timestamp": "2023-09-21T19:15:11Z", "date_only": false, "value": "2023-09-21T19:15:11Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-FJ3M-2R8F-M4X9", "record": "GHSA-FJ3M-2R8F-M4X9", "field": "database_specific.nvd_published_at"}, {"timestamp": "2023-09-21T19:15:11.283Z", "date_only": false, "value": "2023-09-21T19:15:11.283", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-41991", "record": "FKIE_CVE-2023-41991", "field": "published"}, {"timestamp": "2023-09-21T19:15:11.283Z", "date_only": false, "value": "2023-09-21T19:15:11.283", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2023-41991", "record": "GSD-2023-41991", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2023-09-21T21:31:00Z", "date_only": false, "value": "2023-09-21T21:31:00Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-FJ3M-2R8F-M4X9", "record": "GHSA-FJ3M-2R8F-M4X9", "field": "published"}, {"timestamp": "2023-09-21T22:00:00Z", "date_only": false, "value": "2023-09-21T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2427", "record": "WID-SEC-W-2023-2427", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-21T22:00:00Z", "date_only": false, "value": "2023-09-21T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2427", "record": "WID-SEC-W-2023-2427", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-21T22:00:00Z", "date_only": false, "value": "2023-09-21T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2427", "record": "WID-SEC-W-2023-2427", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-09-21T22:00:00Z", "date_only": false, "value": "2023-09-21T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2427", "record": "WID-SEC-W-2023-2427", "field": "document.tracking.current_release_date"}, {"timestamp": "2023-09-21T22:30:41Z", "date_only": false, "value": "2023-09-21T22:30:41.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/cibsecurity/70918", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "7e809172-9716-4ad2-a6a7-fef6c700a6fe", "content": "\u203c CVE-2023-41991 \u203c\n\nA certificate validation issue was addressed. This issue is fixed in iOS 16.7 and iPadOS 16.7, OS 17.0.1 and iPadOS 17.0.1, watchOS 9.6.3, macOS Ventura 13.6, watchOS 10.0.1. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/70918"}, {"timestamp": "2023-09-22T00:00:00Z", "date_only": false, "value": "2023-09-22T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0772", "record": "CERTFR-2023-AVI-0772", "field": "last_revision_date"}, {"timestamp": "2023-09-22T00:00:00Z", "date_only": false, "value": "2023-09-22T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0772", "record": "CERTFR-2023-AVI-0772", "field": "initial_release_date"}, {"timestamp": "2023-09-22T00:00:00Z", "date_only": false, "value": "2023-09-22T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2023-AVI-0772", "record": "CERTFR-2023-AVI-0772", "field": "revisions.0.revision_date"}, {"timestamp": "2023-09-22T04:00:00Z", "date_only": false, "value": "2023-09-22T04:00:00.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1116", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "97e4760a-5399-44c1-b9ba-9ce716eefe3f", "url": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1116"}, {"timestamp": "2023-09-22T04:40:06Z", "date_only": false, "value": "2023-09-22T04:40:06.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/KomunitiSiber/830", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "8d2f5811-70da-4d48-b9ba-013d1b27b450", "content": "Apple Rushes to Patch 3 New Zero-Day Flaws: iOS, macOS, Safari, and More Vulnerable\nhttps://thehackernews.com/2023/09/apple-rushes-to-patch-3-new-zero-day.html\n\nApple has released yet another round of security patches to address three actively exploited zero-day flaws impacting iOS, iPadOS, macOS, watchOS, and Safari, taking the total tally of zero-day bugs discovered in its software this year to 16.\nThe list of security vulnerabilities is as follows -\n\nCVE-2023-41991\u00a0- A certificate validation issue in the Security framework that could allow a", "url": "https://t.me/KomunitiSiber/830"}, {"timestamp": "2023-09-22T04:50:39Z", "date_only": false, "value": "2023-09-22T04:50:39.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/FWboH6ndc-lsXEYy15up4qECp1BA0qztYqFoB5swcq7n1Q", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "7235c031-ccdb-4d58-a6c6-fe6c2443a6cf"}, {"timestamp": "2023-09-22T07:35:26Z", "date_only": false, "value": "2023-09-22T07:35:26.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_16/2023", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "aede6dc5-496f-4cc1-b54f-742866dcc90d", "url": "https://www.kyberturvallisuuskeskus.fi/fi/haavoittuvuus_16/2023"}, {"timestamp": "2023-09-22T08:13:56Z", "date_only": false, "value": "2023-09-22T08:13:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-10", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "135ed5f3-68a2-4801-a251-083eb0e3dde6", "url": "https://www.acn.gov.it/portale/w/aggiornamenti-di-sicurezza-apple-10"}, {"timestamp": "2023-09-22T09:32:03Z", "date_only": false, "value": "2023-09-22T09:32:03.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/true_secator/4878", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "e80bb263-9720-453e-a061-9d1bc001a140", "content": "\u0411\u043e\u043b\u0442\u0443\u043d\u00a0-\u00a0\u043d\u0430\u0445\u043e\u0434\u043a\u0430 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e, \u0435\u0441\u043b\u0438 \u043e\u043d - \u0435\u0449\u0435 \u0438 \u0432\u043b\u0430\u0434\u0435\u043b\u0435\u0446 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Apple.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u043d\u043e\u0430\u044c \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0445 3 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 0-day \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 iPhone \u0438 Mac, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c spyware.\n\n\u0414\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u044f\u0434\u0440\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 WebKit (CVE-2023-41993) \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CVE-2023-41991), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b.\n\n\u0422\u0440\u0435\u0442\u0438\u0439 \u0431\u044b\u043b \u043d\u0430\u0439\u0434\u0435\u043d \u0432 Kernel Framework, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 API \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438 \u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u043d\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-41992) \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0412 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u043e\u0448\u043b\u0438 \u043a\u0430\u043a. \u041d\u043e\u0432\u044b\u0435, \u0442\u0430\u043a \u0438 \u0441\u0442\u0430\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f iPhone 8 \u0438 \u043d\u043e\u0432\u0435\u0435, iPad mini 5-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0438 \u043d\u043e\u0432\u0435\u0435, \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b Mac \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c macOS Monterey \u0438 \u043d\u043e\u0432\u0435\u0435, Apple Watch Series 4 \u0438 \u043d\u043e\u0432\u0435\u0435.\n\nApple \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 macOS 12.7/13.6, iOS 16.7/17.0.1, iPadOS 16.7/17.0.1 \u0438 watchOS 9.6.3/10.0.1 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0438 \u0443\u043b\u0443\u0447\u0448\u0438\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438.\n\n\u0412 \u0441\u0432\u043e\u0438\u0445\u00a0\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445\u00a0Apple \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0433\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS \u0434\u043e iOS 16.7, \u043d\u043e \u0435\u0449\u0435 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u043d\u043e\u0432\u044b\u0445 0-day \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Citizen Lab \u0438 Google TAG, \u0440\u0435\u0447\u044c \u0432\u043d\u043e\u0432\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0434\u0442\u0438 \u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e.\n\n\u0412\u0435\u0434\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0438\u043c\u0438 \u0436\u0435 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0438\u00a0\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0449\u0435\u043b\u0447\u043a\u043e\u043c \u043c\u044b\u0448\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 BLASTPASS, \u0434\u043b\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0435 iPhone \u0441 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u043c \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u043c \u041f\u041e Pegasus \u043e\u0442 NSO Group.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c, \u043c\u043e\u0436\u0435\u0442 \u0447\u0442\u043e-\u0442\u043e \u043d\u043e\u0432\u0435\u043d\u044c\u043a\u043e\u0435.", "url": "https://t.me/true_secator/4878"}, {"timestamp": "2023-09-22T15:18:37Z", "date_only": false, "value": "2023-09-22T15:18:37.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/BitLenta/18165", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "e83e638c-d720-468f-9dc3-23a1e8e46f36", "content": "\u0411\u043e\u043b\u0442\u0443\u043d\u00a0-\u00a0\u043d\u0430\u0445\u043e\u0434\u043a\u0430 \u0434\u043b\u044f \u0448\u043f\u0438\u043e\u043d\u0430, \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e, \u0435\u0441\u043b\u0438 \u043e\u043d - \u0435\u0449\u0435 \u0438 \u0432\u043b\u0430\u0434\u0435\u043b\u0435\u0446 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 Apple.\n\n\u041a\u043e\u043c\u043f\u0430\u043d\u0438\u044f \u0432\u043d\u043e\u0430\u044c \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u0432\u043d\u0435\u043f\u043b\u0430\u043d\u043e\u0432\u044b\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u043e\u0447\u0435\u0440\u0435\u0434\u043d\u044b\u0445 3 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u043c\u044b\u0445 0-day \u0432 \u0430\u0442\u0430\u043a\u0430\u0445 \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 iPhone \u0438 Mac, \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u0435\u043b\u044c\u043d\u043e, \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c spyware.\n\n\u0414\u0432\u0435 \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u044b \u0432 \u044f\u0434\u0440\u0435 \u0431\u0440\u0430\u0443\u0437\u0435\u0440\u0430 WebKit (CVE-2023-41993) \u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 (CVE-2023-41991), \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u0445\u043e\u0434\u0438\u0442\u044c \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0445 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438\u043b\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0430\u0439\u0442\u044b.\n\n\u0422\u0440\u0435\u0442\u0438\u0439 \u0431\u044b\u043b \u043d\u0430\u0439\u0434\u0435\u043d \u0432 Kernel Framework, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 API \u0438 \u043f\u043e\u0434\u0434\u0435\u0440\u0436\u043a\u0443 \u0440\u0430\u0441\u0448\u0438\u0440\u0435\u043d\u0438\u0439 \u044f\u0434\u0440\u0430 \u0438 \u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u043d\u044b\u0445 \u0434\u0440\u0430\u0439\u0432\u0435\u0440\u043e\u0432 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432.\n\n\u041b\u043e\u043a\u0430\u043b\u044c\u043d\u044b\u0435 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u0443\u0442 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u0442\u0443 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2023-41992) \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439.\n\n\u0412 \u0447\u0438\u0441\u043b\u043e \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432 \u0432\u043e\u0448\u043b\u0438 \u043a\u0430\u043a. \u041d\u043e\u0432\u044b\u0435, \u0442\u0430\u043a \u0438 \u0441\u0442\u0430\u0440\u044b\u0435 \u043c\u043e\u0434\u0435\u043b\u0438 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f iPhone 8 \u0438 \u043d\u043e\u0432\u0435\u0435, iPad mini 5-\u0433\u043e \u043f\u043e\u043a\u043e\u043b\u0435\u043d\u0438\u044f \u0438 \u043d\u043e\u0432\u0435\u0435, \u043a\u043e\u043c\u043f\u044c\u044e\u0442\u0435\u0440\u044b Mac \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c macOS Monterey \u0438 \u043d\u043e\u0432\u0435\u0435, Apple Watch Series 4 \u0438 \u043d\u043e\u0432\u0435\u0435.\n\nApple \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 macOS 12.7/13.6, iOS 16.7/17.0.1, iPadOS 16.7/17.0.1 \u0438 watchOS 9.6.3/10.0.1 \u0441 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f\u043c\u0438 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438, \u0443\u0441\u0442\u0440\u0430\u043d\u0438\u0432 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0441 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0438 \u0443\u043b\u0443\u0447\u0448\u0438\u0432 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438.\n\n\u0412 \u0441\u0432\u043e\u0438\u0445\u00a0\u0440\u0435\u043a\u043e\u043c\u0435\u043d\u0434\u0430\u0446\u0438\u044f\u0445\u00a0Apple \u043f\u0440\u0438\u0437\u043d\u0430\u043b\u0430, \u0447\u0442\u043e \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043c\u043e\u0433\u043b\u0430 \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0432 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 iOS \u0434\u043e iOS 16.7, \u043d\u043e \u0435\u0449\u0435 \u043d\u0435 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0434\u043e\u043f\u043e\u043b\u043d\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u043d\u0444\u043e\u0440\u043c\u0430\u0446\u0438\u0438. \n\n\u0423\u0447\u0438\u0442\u044b\u0432\u0430\u044f, \u0447\u0442\u043e \u043e\u0431 \u0430\u0442\u0430\u043a\u0430\u0445 \u0438 \u043d\u043e\u0432\u044b\u0445 0-day \u0441\u043e\u043e\u0431\u0449\u0438\u043b\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 Citizen Lab \u0438 Google TAG, \u0440\u0435\u0447\u044c \u0432\u043d\u043e\u0432\u044c \u043c\u043e\u0436\u0435\u0442 \u0438\u0434\u0442\u0438 \u043e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u0438 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e.\n\n\u0412\u0435\u0434\u044c \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u044b\u0435 \u0438\u043c\u0438 \u0436\u0435 \u0440\u0430\u043d\u0435\u0435 \u0432 \u044d\u0442\u043e\u043c \u043c\u0435\u0441\u044f\u0446\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0443\u043b\u0435\u0432\u043e\u0433\u043e \u0434\u043d\u044f \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u043a\u0430\u043a \u0447\u0430\u0441\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0438\u00a0\u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0441 \u043d\u0443\u043b\u0435\u0432\u044b\u043c \u0449\u0435\u043b\u0447\u043a\u043e\u043c \u043c\u044b\u0448\u0438, \u043f\u043e\u043b\u0443\u0447\u0438\u0432\u0448\u0435\u0439 \u043d\u0430\u0437\u0432\u0430\u043d\u0438\u0435 BLASTPASS, \u0434\u043b\u044f \u0437\u0430\u0440\u0430\u0436\u0435\u043d\u0438\u044f \u043f\u043e\u043b\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u043f\u0430\u0442\u0447\u0435\u043d\u043d\u044b\u0435 iPhone \u0441 \u043a\u043e\u043c\u043c\u0435\u0440\u0447\u0435\u0441\u043a\u0438\u043c \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u043c \u041f\u041e Pegasus \u043e\u0442 NSO Group.\n\n\u041d\u043e \u0431\u0443\u0434\u0435\u043c \u043f\u043e\u0441\u043c\u043e\u0442\u0440\u0435\u0442\u044c, \u043c\u043e\u0436\u0435\u0442 \u0447\u0442\u043e-\u0442\u043e \u043d\u043e\u0432\u0435\u043d\u044c\u043a\u043e\u0435. (secator)", "url": "https://t.me/BitLenta/18165"}, {"timestamp": "2023-09-22T18:46:40Z", "date_only": false, "value": "2023-09-22T18:46:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ap_security/127", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "ac6dcf56-1b0d-4101-acef-9b8500a2871f", "content": "\ud83c\udf10\u0421\u0440\u043e\u0447\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 Apple \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043d\u043e\u0432\u044b\u0435 0-day \u0432 iOS, macOS \u0438 Safari\n\n\ud83c\udf4f\u0421\u0432\u0435\u0436\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b:\n\n\u274cCVE-2023-41991 - \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Security, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u044b\n\n\u274cCVE-2023-41992 - \u0431\u0440\u0435\u0448\u044c \u0432 Kernel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\n\u274cCVE-2023-41993 - \u0434\u044b\u0440\u0430 \u0432 WebKit, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430\n\n\ud83d\udee0\u041f\u0430\u0442\u0447\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b!\n\n#infosec #itnews #cve", "url": "https://t.me/ap_security/127"}, {"timestamp": "2023-09-22T18:46:40Z", "date_only": false, "value": "2023-09-22T18:46:40.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ap_security/57", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "4f12aefe-fc7c-490e-8769-cf15f6efbb84", "content": "\ud83c\udf10\u0421\u0440\u043e\u0447\u043d\u044b\u0435 \u043f\u0430\u0442\u0447\u0438 Apple \u0443\u0441\u0442\u0440\u0430\u043d\u044f\u044e\u0442 \u043d\u043e\u0432\u044b\u0435 0-day \u0432 iOS, macOS \u0438 Safari\n\n\ud83c\udf4f\u0421\u0432\u0435\u0436\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043f\u043e\u043b\u0443\u0447\u0438\u043b\u0438 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0438\u0435 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u044b:\n\n\u274cCVE-2023-41991 - \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0432\u0430\u043b\u0438\u0434\u0430\u0446\u0438\u0438 \u0441\u0435\u0440\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u0430 \u0432\u043e \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Security, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u0443 \u043e\u0431\u043e\u0439\u0442\u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0441\u0438\u0433\u043d\u0430\u0442\u0443\u0440\u044b\n\n\u274cCVE-2023-41992 - \u0431\u0440\u0435\u0448\u044c \u0432 Kernel, \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u044e\u0449\u0430\u044f \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438\n\n\u274cCVE-2023-41993 - \u0434\u044b\u0440\u0430 \u0432 WebKit, \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430\n\n\ud83d\udee0\u041f\u0430\u0442\u0447\u0438 \u0443\u0436\u0435 \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b!\n\n#infosec #itnews #cve", "url": "https://t.me/ap_security/57"}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "cisa-kev", "record": "CVE-2023-41991", "field": "timestamps.asserted_at", "uuid": "bb354db0-bf69-4893-8c1c-60fecb32594a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00+00:00", "kind": "kev", "label": "Asserted", "source": "kevintel", "record": "CVE-2023-41991", "field": "timestamps.asserted_at", "uuid": "96f5938e-5346-4899-abe5-b5c525bdc692", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": true, "value": "2023-09-25", "kind": "other", "label": "Catalog added", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-41991", "field": "containers.adp.1.metrics.2.other.content.dateAdded"}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00.000Z", "kind": "kev", "label": "Catalog added", "source": "kevintel", "record": "CVE-2023-41991", "field": "evidence.0.details.added_date", "uuid": "96f5938e-5346-4899-abe5-b5c525bdc692", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": true, "value": "2023-09-25", "kind": "kev", "label": "Date added", "source": "cisa-kev", "record": "CVE-2023-41991", "field": "evidence.0.details.date_added", "uuid": "bb354db0-bf69-4893-8c1c-60fecb32594a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "cisa-kev", "record": "CVE-2023-41991", "field": "timestamps.first_seen_at", "uuid": "bb354db0-bf69-4893-8c1c-60fecb32594a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00+00:00", "kind": "kev", "label": "First seen", "source": "kevintel", "record": "CVE-2023-41991", "field": "timestamps.first_seen_at", "uuid": "96f5938e-5346-4899-abe5-b5c525bdc692", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "cisa-kev", "record": "CVE-2023-41991", "field": "status.status_updated_at", "uuid": "bb354db0-bf69-4893-8c1c-60fecb32594a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00+00:00", "kind": "kev", "label": "Status updated", "source": "kevintel", "record": "CVE-2023-41991", "field": "status.status_updated_at", "uuid": "96f5938e-5346-4899-abe5-b5c525bdc692", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-09-25T00:00:00Z", "date_only": false, "value": "2023-09-25T00:00:00.000Z", "kind": "other", "label": "Time", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-41991", "field": "containers.adp.1.timeline.0.time"}, {"timestamp": "2023-09-25T11:53:22Z", "date_only": false, "value": "2023-09-25T11:53:22.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/true_secator/4885", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "aab21b9b-4c2d-4d10-afbc-f8641b965f66", "content": "\u041f\u043e\u0434\u043a\u0430\u0442\u0438\u043b\u0438 \u043f\u043e\u0434\u0440\u043e\u0431\u043d\u043e\u0441\u0442\u0438 \u0441\u0442\u043e\u043b\u044c \u0441\u0440\u043e\u0447\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u0443\u0441\u043a\u0430 Apple \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f 0-day \u0432 \u041e\u0421 iPhone, iPad, Mac \u0438 Apple Watch.\n\n\u041a\u0430\u043a \u043d\u0435\u0441\u043b\u043e\u0436\u043d\u043e \u0431\u044b\u043b\u043e \u043f\u0440\u0435\u0434\u043f\u043e\u043b\u043e\u0436\u0438\u0442\u044c \u0432 \u0441\u0432\u044f\u0437\u0438 \u0443\u0447\u0430\u0441\u0442\u0438\u0435\u043c \u0432 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Citizen Lab \u0438 Google TAG, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2023-41991, CVE-2023-41992 \u0438 CVE-2023-41993 \u0431\u044b\u043b\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441\u043e spyware Predator \u043e\u0442 Cytrox.\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u043d\u0430 \u044d\u0442\u043e\u0442 \u0440\u0430\u0437 \u0436\u0435\u0440\u0442\u0432\u043e\u0439 \u0441\u0442\u0430\u043b \u0435\u0433\u0438\u043f\u0435\u0442\u0441\u043a\u0438\u0439 \u043f\u043e\u043b\u0438\u0442\u0438\u043a \u0410\u0445\u043c\u0435\u0434 \u0410\u043b\u044c\u0442\u0430\u043d\u0442\u0430\u0432\u0438, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043f\u043e\u0434\u0432\u0435\u0440\u0433\u0441\u044f \u0430\u0442\u0430\u043a\u0435 \u043f\u043e\u0447\u0442\u0438 \u0441\u0440\u0430\u0437\u0443 \u043f\u043e\u0441\u043b\u0435 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u043e\u0431\u044a\u044f\u0432\u0438\u043b \u043e \u0432\u044b\u0434\u0432\u0438\u0436\u0435\u043d\u0438\u0438 \u0441\u0432\u043e\u0435\u0439 \u043a\u0430\u043d\u0434\u0438\u0434\u0430\u0442\u0443\u0440\u044b \u0434\u043b\u044f \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432 \u043f\u0440\u0435\u0434\u0441\u0442\u043e\u044f\u0449\u0438\u0445 \u0432\u044b\u0431\u043e\u0440\u0430\u0445 \u043f\u0440\u0435\u0437\u0438\u0434\u0435\u043d\u0442\u0430 \u0432 2024 \u0433\u043e\u0434\u0443.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0437\u0430 \u0430\u0442\u0430\u043a\u043e\u0439, \u043f\u043e \u0434\u0430\u043d\u043d\u044b\u043c \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0441\u0442\u043e\u044f\u043b\u0438 \u0434\u0435\u0439\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0432\u043b\u0430\u0441\u0442\u0438 \u0415\u0433\u0438\u043f\u0442\u0430.\n\n\u041f\u0440\u0438 \u044d\u0442\u043e\u043c \u0440\u0430\u043d\u0435\u0435 \u0442\u0435\u043b\u0435\u0444\u043e\u043d \u0410\u043b\u044c\u0442\u0430\u043d\u0442\u0430\u0432\u0438 \u0443\u0436\u0435 \u0443\u0441\u043f\u0435\u0448\u043d\u043e \u0432\u0437\u043b\u043e\u043c\u044b\u0432\u0430\u043b\u0441\u044f \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e Cytrox spyware \u0435\u0449\u0435 \u0432 2021 \u0433\u043e\u0434\u0443 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u0438\u043d\u0446\u0438\u0434\u0435\u043d\u0442\u0430, \u043a\u0430\u043a \u0438 \u0442\u0435\u043b\u0435\u0444\u043e\u043d\u044b \u0440\u044f\u0434\u0430 \u0434\u0440\u0443\u0433\u0438\u0445 \u043e\u043f\u043f\u043e\u0437\u0438\u0446\u0438\u043e\u043d\u043d\u044b\u0445 \u0434\u0435\u044f\u0442\u0435\u043b\u0435\u0439.\n\n\u0412 \u0445\u043e\u0434\u0435 \u0441\u043e\u0432\u043c\u0435\u0441\u0442\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u043d\u0438\u044f \u0441 Facebook (\u043f\u0440\u0438\u0437\u043d\u0430\u043d\u0430 \u0432 \u0420\u0424 \u044d\u043a\u0441\u0442\u0440\u0435\u043c\u0438\u0441\u0442\u0441\u043a\u043e\u0439) \u0442\u043e\u0433\u0434\u0430 \u0431\u044b\u043b\u043e \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043b\u0435\u043d\u043e \u0447\u0442\u043e Cytrox \u0438\u043c\u0435\u0435\u0442 \u0448\u0438\u0440\u043e\u043a\u0443\u044e \u043a\u043b\u0438\u0435\u043d\u0442\u0443\u0440\u0443 \u0432 \u0410\u0440\u043c\u0435\u043d\u0438\u0438, \u0413\u0440\u0435\u0446\u0438\u0438, \u0418\u043d\u0434\u043e\u043d\u0435\u0437\u0438\u0438, \u041c\u0430\u0434\u0430\u0433\u0430\u0441\u043a\u0430\u0440\u0435, \u041e\u043c\u0430\u043d\u0435, \u0421\u0430\u0443\u0434\u043e\u0432\u0441\u043a\u043e\u0439 \u0410\u0440\u0430\u0432\u0438\u0438 \u0438 \u0421\u0435\u0440\u0431\u0438\u0438.\n\nCitizen Lab \u043f\u043e\u044f\u0441\u043d\u0438\u043b\u0430, \u0447\u0442\u043e \u0432 \u043f\u0435\u0440\u0438\u043e\u0434 \u0441 \u043c\u0430\u044f \u043f\u043e \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044c 2023 \u0433\u043e\u0434\u0430 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043b\u0438 \u0430\u0442\u0430\u043a\u0443 \u0441 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0444\u0435\u0439\u043a\u043e\u0432\u044b\u0445 SMS \u0438 \u0441\u043e\u043e\u0431\u0449\u0435\u043d\u0438\u0439 WhatsApp, \u0430 \u0442\u0430\u043a\u0436\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u0443\u044f \u043f\u043e\u0434\u043a\u043b\u044e\u0447\u0435\u043d\u0438\u0435 \u0434\u0435\u0432\u0430\u0439\u0441\u0430 \u043a \u0441\u0435\u0442\u0438 Vodaphone Egypt \u0441 \u043f\u043e\u0437\u0438\u0446\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 \u0434\u043b\u044f \u043f\u0435\u0440\u0435\u043d\u0430\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043d\u0430 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 \u0441\u0430\u0439\u0442 \u0447\u0435\u0440\u0435\u0437  \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0435 \u0440\u0435\u0441\u0443\u0440\u0441\u044b \u0431\u0435\u0437 HTTPS. \n\n\u041d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445 iOS \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0441\u044f \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442 \u0434\u043b\u044f \u043f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE) \u0432 Safari \u0447\u0435\u0440\u0435\u0437 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0435 \u0441\u0442\u0440\u0430\u043d\u0438\u0446\u044b, \u043e\u0448\u0438\u0431\u043a\u0430 CVE-2023-41991 \u0434\u043b\u044f \u043e\u0431\u0445\u043e\u0434\u0430 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u0434\u043f\u0438\u0441\u0438 \u0438 CVE-2023- 41992 \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0439 \u044f\u0434\u0440\u0430.\n\n\u041a\u0440\u043e\u043c\u0435 \u0442\u043e\u0433\u043e, Google TAG \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442, \u0447\u0442\u043e \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u0443\u044e \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432 \u0434\u043b\u044f \u0443\u0441\u0442\u0430\u043d\u043e\u0432\u043a\u0438 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u043e\u0433\u043e \u041f\u041e Predator \u043d\u0430 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 Android \u0432 \u0415\u0433\u0438\u043f\u0442\u0435, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u044f CVE-2023-4762\u00a0\u0432 Chrome, \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u043d\u0443\u044e 5 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f \u2014 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 0-day \u0434\u043b\u044f \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430.\n\n\u0422\u0435\u043c \u043d\u0435 \u043c\u0435\u043d\u0435\u0435, \u0434\u0435\u0442\u0430\u043b\u0438 \u0442\u043e\u0433\u043e, \u043a\u0430\u043a \u0443\u0434\u0430\u043b\u043e\u0441\u044c \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0438\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0443 \u0448\u043f\u0438\u043e\u043d\u0441\u043a\u0438\u0445 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u0432, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u043f\u043e\u044f\u0441\u043d\u044f\u0442\u044c \u043d\u0435 \u0441\u0442\u0430\u043b\u0438.\n\n\u0418 \u0431\u0435\u0437 \u0442\u043e\u0433\u043e \u043f\u043e\u043d\u044f\u0442\u043d\u043e \u0447\u0442\u043e, \u043f\u043e\u0441\u043b\u0435 \u0432\u043d\u0435\u0441\u0435\u043d\u0438\u044f \u0421\u0428\u0410 \u0432 \u0438\u044e\u043b\u0435 \u043f\u043e\u0441\u0442\u0430\u0432\u0449\u0438\u043a\u0430 Predator, Cytrox, \u0432 \u0441\u0432\u043e\u0439 \u0447\u0435\u0440\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a, \u0441\u0442\u0430\u043b\u0438 \u0432\u0434\u0440\u0443\u0433 \u043d\u0443\u0436\u043d\u044b \u0440\u0430\u0437\u043e\u0431\u043b\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u044b\u0435 \u043a\u0435\u0439\u0441\u044b, \u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0432 \u0431\u043b\u0438\u0436\u0430\u0439\u0448\u0435\u0435 \u0432\u0440\u0435\u043c\u044f \u0441\u0442\u0430\u043d\u0435\u0442 \u0435\u0449\u0435 \u0431\u043e\u043b\u044c\u0448\u0435.\n\n\u0412\u0435\u0434\u044c \u043f\u0440\u043e\u0448\u043b\u043e\u0433\u043e\u0434\u043d\u0438\u0439 \u0441\u043a\u0430\u043d\u0434\u0430\u043b \u0441 Predator \u0432 \u0413\u0440\u0435\u0446\u0438\u0438 \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u043b \u0443\u0441\u043a\u043e\u0440\u0435\u043d\u043d\u0443\u044e \u043e\u0442\u0441\u0442\u0430\u0432\u043a\u0443 \u0434\u0432\u0443\u0445 \u0432\u044b\u0441\u043e\u043a\u043e\u043f\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u043d\u044b\u0445 \u043f\u0440\u0430\u0432\u0438\u0442\u0435\u043b\u044c\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0445 \u0447\u0438\u043d\u043e\u0432\u043d\u0438\u043a\u043e\u0432, \u0432\u043a\u043b\u044e\u0447\u0430\u044f \u0434\u0438\u0440\u0435\u043a\u0442\u043e\u0440\u0430 \u043d\u0430\u0446\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u043e\u0439 \u0440\u0430\u0437\u0432\u0435\u0434\u043a\u0438. \u0422\u0435\u043f\u0435\u0440\u044c - \u0415\u0433\u0438\u043f\u0435\u0442.", "url": "https://t.me/true_secator/4885"}, {"timestamp": "2023-09-25T18:10:02Z", "date_only": false, "value": "2023-09-25T18:10:02.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "0c0dcb3c-e28a-47f5-b3ec-a2070ee60c2a"}, {"timestamp": "2023-09-26T22:00:00Z", "date_only": false, "value": "2023-09-26T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-26T22:00:00Z", "date_only": false, "value": "2023-09-26T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.revision_history.0.date"}, {"timestamp": "2023-09-26T22:00:00Z", "date_only": false, "value": "2023-09-26T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-26T22:00:00Z", "date_only": false, "value": "2023-09-26T22:00:00.000+00:00", "kind": "milestone", "label": "Published", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.initial_release_date"}, {"timestamp": "2023-09-26T22:00:00Z", "date_only": false, "value": "2023-09-26T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-09-26T22:00:00Z", "date_only": false, "value": "2023-09-26T22:00:00.000+00:00", "kind": "other", "label": "Release date", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "vulnerabilities.0.release_date"}, {"timestamp": "2023-09-28T22:00:00Z", "date_only": false, "value": "2023-09-28T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-10-16T00:00:00Z", "date_only": true, "value": "2023-10-16", "kind": "kev", "label": "Due date", "source": "cisa-kev", "record": "CVE-2023-41991", "field": "evidence.0.details.due_date", "uuid": "bb354db0-bf69-4893-8c1c-60fecb32594a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2023-10-25T22:00:00Z", "date_only": false, "value": "2023-10-25T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "document.tracking.revision_history.1.date"}, {"timestamp": "2023-11-29T14:07:40Z", "date_only": false, "value": "2023-11-29T14:07:40.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/arpsyndicate/748", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "883425da-fbe8-4b12-b48b-be9f04295f83", "content": "#ExploitObserverAlert\n\nCVE-2023-41991\n\nDESCRIPTION: Exploit Observer has 4 entries related to CVE-2023-41991. A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.\n\nFIRST-EPSS: 0.005510000\nNVD-IS: 3.6\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/748"}, {"timestamp": "2023-12-03T22:35:59Z", "date_only": false, "value": "2023-12-03T22:35:59.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/arpsyndicate/1046", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "54ea6ff6-8849-4c93-95df-d56278d7ac57", "content": "#ExploitObserverAlert\n\nCVE-2023-41991\n\nDESCRIPTION: Exploit Observer has 2 entries related to CVE-2023-41991. A certificate validation issue was addressed. This issue is fixed in macOS Ventura 13.6, iOS 16.7 and iPadOS 16.7. A malicious app may be able to bypass signature validation. Apple is aware of a report that this issue may have been actively exploited against versions of iOS before iOS 16.7.\n\nFIRST-EPSS: 0.007460000\nNVD-IS: 3.6\nNVD-ES: 1.8", "url": "https://t.me/arpsyndicate/1046"}, {"timestamp": "2023-12-13T01:20:45.177Z", "date_only": false, "value": "2023-12-13T01:20:45.177565Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-41991", "record": "GSD-2023-41991", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-10T22:03:18.435Z", "date_only": false, "value": "2024-01-10T22:03:18.435Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / apple", "record": "CVE-2023-41991", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-10T22:15:49.337Z", "date_only": false, "value": "2024-01-10T22:15:49.337", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2023-41991", "record": "GSD-2023-41991", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-01-22T23:00:00Z", "date_only": false, "value": "2024-01-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-01-22T23:00:00Z", "date_only": false, "value": "2024-01-22T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.revision_history.2.date"}, {"timestamp": "2024-08-15T17:58:46.274Z", "date_only": false, "value": "2024-08-15T17:58:46.274+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2427", "record": "WID-SEC-W-2023-2427", "field": "document.tracking.generator.date"}, {"timestamp": "2024-10-21T16:49:20Z", "date_only": false, "value": "2024-10-21T16:49:20.000000Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/freeosint/2030", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "c6309475-b831-4711-9574-f5d906336a5b", "content": "Google: \u0420\u043e\u0441\u0441\u0438\u0439\u0441\u043a\u0438\u0435 \u0445\u0430\u043a\u0435\u0440\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f iOS \u0438 Android \u043e\u0442 NSO. \n\n\u0418\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0438 \u0438\u0437 Google Threat Analysis Group (TAG) \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043e\u0431 \u0430\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u043e\u0439 \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0438 APT29: \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438, \u044f\u043a\u043e\u0431\u044b \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0435 \u0441 \u0420\u043e\u0441\u0441\u0438\u0435\u0439, \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043b\u0438 \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u0438 NSO Group \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 iOS \u0438 Android.\n\u0410\u0442\u0430\u043a\u0438, \u043f\u043e \u0441\u043b\u043e\u0432\u0430\u043c \u044d\u043a\u0441\u043f\u0435\u0440\u0442\u043e\u0432, \u043f\u0440\u043e\u0445\u043e\u0434\u0438\u043b\u0438 \u0441 \u043d\u043e\u044f\u0431\u0440\u044f 2023 \u0433\u043e\u0434\u0430 \u043f\u043e \u0438\u044e\u043b\u044c 2023-\u0433\u043e. \u041a \u0442\u043e\u043c\u0443 \u043c\u043e\u043c\u0435\u043d\u0442\u0443 \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438 \u0443\u0436\u0435 \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0438 \u043f\u0430\u0442\u0447\u0438, \u043d\u043e \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430 \u043f\u043e \u0442\u0440\u0430\u0434\u0438\u0446\u0438\u0438 \u043d\u0435 \u0443\u0441\u043f\u0435\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u0438\u0442\u044c\u0441\u044f.\nAPT29, \u0442\u0430\u043a\u0436\u0435 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u0430\u044f \u043f\u043e\u0434 \u0438\u043c\u0435\u043d\u0435\u043c Midnight Blizzard, \u0432 \u043f\u043e\u0448\u043b\u043e\u043c \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0430\u0441\u044c \u0430\u0442\u0430\u043a\u043e\u0439 \u043d\u0430 Microsoft, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u043b\u0430 \u0444\u0435\u0434\u0435\u0440\u0430\u043b\u044c\u043d\u044b\u0435 \u043e\u0440\u0433\u0430\u043d\u044b \u0421\u0428\u0410. \u0422\u0435\u043f\u0435\u0440\u044c \u0433\u0440\u0443\u043f\u043f\u0438\u0440\u043e\u0432\u043a\u0430 \u0432\u0437\u044f\u043b\u0430\u0441\u044c \u0437\u0430 \u0432\u043b\u0430\u0441\u0442\u0438 \u041c\u043e\u043d\u0433\u043e\u043b\u0438\u0438.\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0442\u0438\u043b\u0438 \u0432 Google Threat Analysis Group, \u043a\u0438\u0431\u0435\u0440\u043f\u0440\u0435\u0441\u0442\u0443\u043f\u043d\u0438\u043a\u0438 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043b\u0438\u0441\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c\u044e \u043f\u043e\u0434 \u0438\u0434\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0442\u043e\u0440\u043e\u043c CVE-2023-41993, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0443\u044e WebKit \u0438 \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0443\u044e \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043f\u0440\u0438 \u043e\u0442\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0433\u043e \u0432\u0435\u0431-\u043a\u043e\u043d\u0442\u0435\u043d\u0442\u0430.\n\u041a\u0430\u043a \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u043e, Apple \u0432\u044b\u043f\u0443\u0441\u0442\u0438\u043b\u0430 \u043f\u0430\u0442\u0447 \u0434\u043b\u044f \u044d\u0442\u043e\u0439 \u0434\u044b\u0440\u044b \u0432 \u043a\u043e\u043d\u0446\u0435 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f 2022 \u0433\u043e\u0434\u0430. \u0412\u043c\u0435\u0441\u0442\u0435 \u0441 \u043d\u0435\u0439 \u043a\u043e\u0440\u043f\u043e\u0440\u0430\u0446\u0438\u044f \u0437\u0430\u043a\u0440\u044b\u043b\u0430 CVE-2023-41991 \u0438 CVE-2023-41992.\n\u0412\u043e\u043e\u0440\u0443\u0436\u0438\u0432\u0448\u0438\u0441\u044c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u043c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u043e\u043c, APT29 \u0441\u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0441\u0430\u0439\u0442\u044b mfa.gov[.]mn \u0438 cabinet.gov[.]mn \u0438 \u0434\u043e\u0431\u0430\u0432\u0438\u043b\u0430 \u0432 \u043a\u043e\u0434 \u0438\u0445 \u0441\u0442\u0440\u0430\u043d\u0438\u0446 \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u0439 iframe. \u0421\u0445\u0435\u043c\u0430 \u0432\u0435\u043a\u0442\u043e\u0440\u0430 \u0432\u044b\u0433\u043b\u044f\u0434\u0435\u043b\u0430 \u0442\u0430\u043a:\n\u00a0\n\u0422\u0430\u043a\u043e\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0438 \u043c\u043e\u0433\u043b\u0438 \u043f\u043e\u0445\u0438\u0449\u0430\u0442\u044c cookies \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0435\u0432 iPhone, \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0438\u0445 \u043f\u043e\u0434 \u0443\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c iOS 16.6.1 \u0438 \u0431\u043e\u043b\u0435\u0435 \u0441\u043e\u0432\u0440\u0435\u043c\u0435\u043d\u043d\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u0439 \u041e\u0421.\n\u0423\u0436\u0435 \u0432 \u0438\u044e\u043b\u0435 2024-\u0433\u043e \u0433\u0440\u0443\u043f\u043f\u0430 \u0441\u0442\u0430\u043b\u0430 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c \u044d\u043a\u0441\u043f\u043b\u043e\u0439\u0442\u044b \u0434\u043b\u044f CVE-2024-5274 \u0438 CVE-2024-4671, \u0437\u0430\u0442\u0440\u0430\u0433\u0438\u0432\u0430\u044e\u0449\u0438\u0435 Google Chrome, \u0434\u043b\u044f \u0430\u0442\u0430\u043a \u043d\u0430 \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439 Android, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043f\u043e\u0441\u0435\u0449\u0430\u043b\u0438 \u0441\u0430\u0439\u0442 mga.gov[.]mn.", "url": "https://t.me/freeosint/2030"}, {"timestamp": "2024-12-24T20:35:19.044Z", "date_only": false, "value": "2024-12-24T20:35:19.044080Z", "kind": "sighting", "label": "Seen", "source": "https://feedsin.space/feed/CISAKevBot/items/2971891", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "89f9a9a0-827e-4b03-b12e-5d2a03375d9c", "url": "https://feedsin.space/feed/CISAKevBot/items/2971891"}, {"timestamp": "2025-02-04T15:13:21.191Z", "date_only": false, "value": "2025-02-04T15:13:21.191475Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-41991", "field": "containers.adp.1.metrics.1.other.content.timestamp"}, {"timestamp": "2025-02-04T15:13:21.191Z", "date_only": false, "value": "2025-02-04T15:13:21.191475Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-41991", "record": "FKIE_CVE-2023-41991", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2025-02-14T10:00:28Z", "date_only": false, "value": "2025-02-14T10:00:28.000000Z", "kind": "sighting", "label": "Exploited", "source": "Telegram/brk3a8w0tXwgIPi229YtHYfBkrFHcLl6-VX9DciHDK6sU6J0", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "1d72599c-5e4b-49cb-8888-de5d637f2f33"}, {"timestamp": "2025-02-23T02:10:47Z", "date_only": false, "value": "2025-02-23T02:10:47.000000Z", "kind": "sighting", "label": "Seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "694c0e89-6bc2-4af0-92f8-ad441c9ba75f"}, {"timestamp": "2025-04-13T22:00:00Z", "date_only": false, "value": "2025-04-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-04-13T22:00:00Z", "date_only": false, "value": "2025-04-13T22:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.revision_history.3.date"}, {"timestamp": "2025-04-13T22:00:00Z", "date_only": false, "value": "2025-04-13T22:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "document.tracking.current_release_date"}, {"timestamp": "2025-04-14T08:21:12.074Z", "date_only": false, "value": "2025-04-14T08:21:12.074+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2453", "record": "WID-SEC-W-2023-2453", "field": "document.tracking.generator.date"}, {"timestamp": "2025-10-21T23:05:37.441Z", "date_only": false, "value": "2025-10-21T23:05:37.441Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2023-41991", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T19:21:39.550Z", "date_only": false, "value": "2025-11-04T19:21:39.550Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2023-41991", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2025-11-04T19:21:39.550Z", "date_only": false, "value": "2025-11-04T19:21:39.550Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2023-41991", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2025-11-04T21:30:39Z", "date_only": false, "value": "2025-11-04T21:30:39Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-FJ3M-2R8F-M4X9", "record": "GHSA-FJ3M-2R8F-M4X9", "field": "modified"}, {"timestamp": "2026-02-02T12:26:49.822Z", "date_only": false, "value": "2026-02-02T12:26:49.822351Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a783545e-dcb5-4a07-8f61-3d1603939e20", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "42890623-49a3-46ee-978a-2a082e61f6b8", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a783545e-dcb5-4a07-8f61-3d1603939e20"}, {"timestamp": "2026-02-02T12:26:49.822Z", "date_only": false, "value": "2026-02-02T12:26:49.822351Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a783545e-dcb5-4a07-8f61-3d1603939e20", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "e7ed53c7-f27d-47f5-a6a9-6a03c51e035a", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/a783545e-dcb5-4a07-8f61-3d1603939e20"}, {"timestamp": "2026-02-02T13:24:01Z", "date_only": false, "value": "2026-02-02T13:24:01+00:00", "kind": "kev", "label": "Recorded", "source": "cisa-kev", "record": "CVE-2023-41991", "field": "timestamps.recorded_at", "uuid": "bb354db0-bf69-4893-8c1c-60fecb32594a", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-02-03T11:10:04.325Z", "date_only": false, "value": "2026-02-03T11:10:04.325314Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/bongwatering.bsky.social/post/3mdx7xmzohs2m", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "604f4381-2b5a-4036-9b78-7c5d3237aa35", "url": "https://bsky.app/profile/bongwatering.bsky.social/post/3mdx7xmzohs2m"}, {"timestamp": "2026-03-05T23:00:00Z", "date_only": false, "value": "2026-03-05T23:00:00.000+00:00", "kind": "other", "label": "Advisory revision", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.revision_history.4.date"}, {"timestamp": "2026-03-05T23:00:00Z", "date_only": false, "value": "2026-03-05T23:00:00.000+00:00", "kind": "other", "label": "Updated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.current_release_date"}, {"timestamp": "2026-03-06T09:17:19.595Z", "date_only": false, "value": "2026-03-06T09:17:19.595+00:00", "kind": "other", "label": "Document generated", "source": "csaf_certbund \u00b7 WID-SEC-W-2023-2454", "record": "WID-SEC-W-2023-2454", "field": "document.tracking.generator.date"}, {"timestamp": "2026-06-17T06:23:13.087Z", "date_only": false, "value": "2026-06-17T06:23:13.087", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2023-41991", "record": "FKIE_CVE-2023-41991", "field": "lastModified"}, {"timestamp": "2026-06-19T12:46:48.254Z", "date_only": false, "value": "2026-06-19T12:46:48.254949Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6acef704-879a-4f08-af8f-2064efda48da", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "fe95f9b2-b9f6-4986-accf-d160d5c5dc2b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/6acef704-879a-4f08-af8f-2064efda48da"}, {"timestamp": "2026-06-23T11:11:17Z", "date_only": false, "value": "2026-06-23T11:11:17+00:00", "kind": "kev", "label": "Recorded", "source": "kevintel", "record": "CVE-2023-41991", "field": "timestamps.recorded_at", "uuid": "96f5938e-5346-4899-abe5-b5c525bdc692", "status": {"status_reason": "confirmed", "exploited": true}}, {"timestamp": "2026-06-23T11:14:10.816Z", "date_only": false, "value": "2026-06-23T11:14:10.816309Z", "kind": "sighting", "label": "Exploited", "source": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/96f5938e-5346-4899-abe5-b5c525bdc692", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "23701a80-e01f-49d0-8563-34fff5f7e6de", "url": "https://db.gcve.eu/known-exploited-vulnerabilities-catalog/96f5938e-5346-4899-abe5-b5c525bdc692"}, {"timestamp": "2026-06-23T14:05:45.997Z", "date_only": false, "value": "2026-06-23T14:05:45.997036Z", "kind": "sighting", "label": "Exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/933839f4-3101-4d8c-a063-a52b190ebdd9", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "ad174b79-2e00-486e-8dc0-9d153922bb2b", "url": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/933839f4-3101-4d8c-a063-a52b190ebdd9"}, {"timestamp": "2026-07-26T02:02:20.621Z", "date_only": false, "value": "2026-07-26T02:02:20.621835Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1993", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "ba297d39-ca89-44fc-ad09-46de120e0d3c", "url": "https://t.me/EchelonEyes/1993"}, {"timestamp": "2026-07-27T00:00:57.792Z", "date_only": false, "value": "2026-07-27T00:00:57.792273Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/EchelonEyes/1993", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "016887d1-ada6-47eb-bc5e-67134aacf348", "url": "https://t.me/EchelonEyes/1993"}, {"timestamp": "2026-07-28T00:00:25.717Z", "date_only": false, "value": "2026-07-28T00:00:25.717752Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/EchelonEyes/1993", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "614f0b77-3752-4f31-a1f9-5371c0c28d6a", "url": "https://t.me/EchelonEyes/1993"}, {"timestamp": "2026-08-24T13:00:03.170Z", "date_only": false, "value": "2026-08-24T13:00:03.170809Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/xhqcankao/6327", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "ab8e3de0-02d5-470c-b767-ba60db3eab30", "url": "https://t.me/xhqcankao/6327"}, {"timestamp": "2026-08-25T00:00:23.664Z", "date_only": false, "value": "2026-08-25T00:00:23.664079Z", "kind": "sighting", "label": "Exploited", "source": "https://t.me/xhqcankao/6327", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "ee7e4f18-3f96-4c6c-968e-c4339c9e4c6b", "url": "https://t.me/xhqcankao/6327"}, {"timestamp": "2026-09-01T17:00:07.519Z", "date_only": false, "value": "2026-09-01T17:00:07.519011Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/848", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "88fcd327-84ca-48a3-b01f-21d91521bbd6", "url": "https://t.me/Hackme_news/848"}, {"timestamp": "2026-09-01T17:00:07.621Z", "date_only": false, "value": "2026-09-01T17:00:07.621945Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/Hackme_news/843", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "f087c1d7-3dd9-4263-82a4-4b9d82ed1d41", "url": "https://t.me/Hackme_news/843"}, {"timestamp": "2026-10-17T17:59:48Z", "date_only": false, "value": "2026-10-17T17:59:48.000000Z", "kind": "sighting", "label": "Seen", "source": "https://gist.github.com/yn99rbccg7-web/deda0e5b8007f75ee0befbfd572ad827", "record": "CVE-2023-41991", "field": "creation_timestamp", "uuid": "5884510f-a3bc-465e-90f8-55d6a750c9bd", "url": "https://gist.github.com/yn99rbccg7-web/deda0e5b8007f75ee0befbfd572ad827"}]}