An imminent iOS update is set to make cyberattacks that require no input from the victim (also known as zero-click exploits) much harder to execute.
As evidenced by the beta version of iOS 14.5, Apple has changed its approach to securing code running on its phones and tablets, making it far more difficult for hackers to develop exploits that do not rely on some form of slip-up on the user’s part.
Although Apple already uses a technology known as Pointer Authentication Codes (PAC) to prevent attackers from abusing corrupted memory, this protection does not currently extend to ISA pointers, used to inform applications which portion of code to refer to.
…
Read more
