apple Latest English news | apple Online News in English at Lokmattimes.com

San Francisco, Dec 14 Cyber security researchers have discovered that changing the device name of an iPhone or a Tesla in the settings reveals remote server details, indicating that the server at the other end is vulnerable to the most serious Internet bug called 'Log4Shell'.In demonstrations, researchers changed the device names to a "string of characters" that would send servers to a testing URL, reports The Verge."After the name was changed, incoming traffic showed URL requests from IP addresses belonging to Apple and, in the case of Tesla, China Unicom the company's mobile service partner for the Chinese market," the report said late on Monday.The team of researchers actually tricked Apple and Tesla servers into visiting a URL of their choice.A Dutch security researcher demonstrated the iPhone server details."An attacker could host malicious code at the target URL in order to infect vulnerable servers, but a well-maintained network could prevent such an attack at the network level," the report noted.Cyber security researchers have warned that hackers are making over 100 attempts every minute to exploit a critical security vulnerability in the widely-used Java logging system called 'Apache log4j2', leaving millions of companies globally at cyber theft risk.Several popular services, including Apple iCloud, Amazon, Twitter, Cloudflare and Minecraft, are vulnerable to this 'ubiquitous' zero-day exploit, now dubbed as one of the most serious vulnerabilities on the Internet in recent years.'Apache Log4j' is used in many forms of enterprise and open-source software, including cloud platforms, web applications and email services.Apache Log4j is the most popular java logging library with over 400,000 downloads from its GitHub project. It is used by a vast number of companies worldwide, enabling logging in a wide set of popular applications."Exploiting this vulnerability is simple and allows threat actors to control java-based web servers and launch remote code execution attacks," cyber security researchers said in a blog post.Researchers at Microsoft have also warned about attacks attempting to take advantage of 'Log4j' vulnerabilities, including a range of crypto-mining malware.Disclaimer: This post has been auto-published from an agency feed without any modifications to the text and has not been reviewed by an editor

Apple, NewsFOLLOW

Apple, Latest News

San Francisco, Dec 16 As Covid cases rise globally as well as in the US, Apple has indefinitely ... ...

Seoul, Dec 16 Samsung Electronics retained the top spot in the global smartphone market in the third quarter ... ...

Los Angeles, Dec 16 Emmy-winning comedian and actor Ben Schwartz has joined the ensemble cast of 'Renfield'. The ... ...

San Francisco, Dec 15 Display analyst Ross Young has claimed that Apple may launch its first foldable iPhone ... ...

San Francisco, Dec 14 Tech giant Apple is likely to launch its upcoming iPhone 14 Pro variants with ... ...

New Delhi, Dec 14 Tech giant Apple has said that it brought SharePlay to the Mac as part ... ...

San Francisco, Dec 14 Apple has released a new Android app called 'Tracker Detect' to let users detect ... ...

San Francisco, Dec 14 Cyber security researchers have discovered that changing the device name of an iPhone or ... ...