It’s Almost Impossible to Tell if Your iPhone Has Been Hacked
A recent vulnerability in WhatsApp shows that there’s little defenders can do to detect and analyze iPhone hacks.
A Saudi Cybersecurity Company Tried to Buy Zero Day Exploits from Me
We recently got a rare look at how a company tried to source these exploits through private one-on-one deals—because the company came to us.
As Phones Get Harder to Hack, Zero Day Vendors Hunt for Router Exploits
Obtaining vulnerabilities for fully up-to-date mobile phones is getting harder. So companies that sell exploits to governments are increasingly looking for attacks that target internet routers instead, with one company paying up to $100,000.
The Prototype iPhones That Hackers Use to Research Apple’s Most Sensitive Code
Very few people have heard of them, but "dev-fused" iPhones sold on the grey market are one of the most important tools for the best iOS hackers in the world.
You Can Now Get $1 Million for Hacking WhatsApp and iMessage
Companies that buy and sell exploits, or zero-days, are now willing to offer seven figures for hacks that allow spies and cops to steal WhatsApp, iMessage and other chat app messages.
State of Surveillance
They Got 'Everything': Inside a Demo of NSO Group's Powerful iPhone Malware
A source managed to see Israeli surveillance vendor NSO Group’s powerful iPhone malware up close. Despite a wave of highly controversial customers, the company appears to be popular worldwide.
HACKS FOR SALE
Zero-Day Shop Opens the Floodgates for People to Sell Exploits to Governments
Dubai-based Crowdfense, which buys zero day exploits for iOS and a variety of other platforms, is trying to streamline the process of sourcing vulnerabilities.
The Shadow Brokers
Cryptocurrency Transactions May Uncover Sales of Shadow Broker Hacking Tools
Even though the Shadow Brokers told customers to use privacy-focused cryptocurrency Zcash, researchers may have found clues pointing to who tried to buy more of the group's wares.
PATCH IT UP
This Russian Company Sells Zero-Day Exploits for Hospital Software
Moscow-based Gleg provides zero-day exploits for medical software, and those in the medical industry are concerned about disclosure. But the exploits themselves may not be all that important in real world attacks.
Startup Offers $3 Million to Anyone Who Can Hack the iPhone
A new startup in Dubai is offering six and seven figure payouts for zero-day exploits for Android, iOS, Windows and Mac.
Israeli Government Asked European Security Companies for Zero-Days in Unsolicited Emails
Israel cast a wide net in Europe too, looking to purchase zero-days for its law enforcement and intelligence agencies.
Here’s the Letter Israel Sent to Solicit Zero-Days From American Hackers
In a peek into the way governments may source hacking tools, Motherboard obtained a 2015 letter the Israeli Ministry of Defense sent to US-based exploit developers.