Millions of iOS and macOS apps have been exposed to a security breach that could be used for potential supply-chain attacks, says an ArsTechnica report based on research by EVA Information Security.
Millions of Apple Applications Were Vulnerable to CocoaPods Supply Chain Attack Your email has been sent The vulnerabilities have since been patched, but had quietly persisted since the CocoaPods ...
Vulnerabilities that went undetected for a decade left thousands of macOS and iOS apps susceptible to supply-chain attacks. Hackers could have added malicious code compromising the security of ...
CocoaPods has reached version 1.0, and is celebrating its milestone by officially changing how Podfiles work, and giving Pod owners more control. Though the changes to Podfiles were known (via a ...
The open-source Swift and Objective-C repository, CocoaPods, had multiple vulnerabilities that left millions of iOS and macOS apps exposed to potential attacks for a decade, but it is now patched.
Still, the developers of CocoaPods can’t say for sure if hackers ever exploited the flaws to secretly make changes to any affected apps. “This touches code which has been in trunk (the centralized ...
Although the hole in the CocoaPods tool is now closed, developers are advised to verify there's nothing rotten in the dependencies used in their existing code. Recently patched vulnerabilities in a ...
Threatening Coldplay and U2 collections everywhere Millions of Apple devices are vulnerable to a decade old secuirty bug. According to a report by The Cyber Express, the news service of… Threatening ...
Google announced today at its I/O developer event that it’s adopting the popular CocoaPods standard for iOS developers so they can easily integrate Google tools. The company said it will use Cocoapods ...
Yikes: Security researchers have discovered vulnerabilities in an open-source software project that could have been exploited to hack thousands of iOS and macOS apps. The threat involves CocoaPods, ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results