The Trident Exploit for iOS

Bill Marczak and John Scott-Railton of the Citizen Lab:

Ahmed Mansoor is an internationally recognized human rights defender, based in the United Arab Emirates (UAE), and recipient of the Martin Ennals Award (sometimes referred to as a “Nobel Prize for human rights”). On August 10 and 11, 2016, Mansoor received SMS text messages on his iPhone promising “new secrets” about detainees tortured in UAE jails if he clicked on an included link. Instead of clicking, Mansoor sent the messages to Citizen Lab researchers. We recognized the links as belonging to an exploit infrastructure connected to NSO Group, an Israel-based “cyber war” company that sells Pegasus, a government-exclusive “lawful intercept” spyware product. NSO Group is reportedly owned by an American venture capital firm, Francisco Partners Management.

The ensuing investigation, a collaboration between researchers from Citizen Lab and from Lookout Security, determined that the links led to a chain of zero-day exploits (“zero-days”) that would have remotely jailbroken Mansoor’s stock iPhone 6 and installed sophisticated spyware. We are calling this exploit chain Trident. Once infected, Mansoor’s phone would have become a digital spy in his pocket, capable of employing his iPhone’s camera and microphone to snoop on activity in the vicinity of the device, recording his WhatsApp and Viber calls, logging messages sent in mobile chat apps, and tracking his movements.

If you’ve got an iPhone or iPad: upgrade it to iOS 9.3.5 as soon as possible.

Lorde Working on New Album

Lorde

Lorde’s new album is written and currently in the production stages. Because the internet is, well, the internet … we learned this after a “fan” posted on Lorde’s Instagram page asking, “Do you think we will ever get another album or should we just give up on you as an artist?” Lorde then responded:

give up on me if you want to! I’m an artist, I write a record when I have enough special stories to tell, and it’s all me, every melody every lyric, not some team who just start the machine up every eighteen months like clockwork. the record is written, we’re in the production stages now. I’ve worked like a dog for a year making this thing great for you guys

It’s only been three years since the last one. Try being a Brand New fan.

Three Arrested, 7 Ticketed at Blink-182 Concert

Blink-182

WKWB Buffalo:

The Genesee County Sheriff’s Office arrested three people and ticketed seven more at the Blink 182 concert at Darien Lake Performing Arts Center on Wednesday, including one man being held on $1,500 bail.

Deputies arrested 23-year-old Brandon Robinson of Amherst, charging him with harassment, criminal trespass, and resisting arrest. Deputies say Robinson jumped a fence to get into the concert, then fought with security guards trying to apprehend him. He was arraigned in Darien Town Court and taken to jail on $1,500 bail.

Apple Announce Music Festival Lineup

Apple has announced their Apple Music Festival lineup: Alicia Keys, Bastille, Britney Spears, Calvin Harris, Chance the Rapper, Elton John, Michael Bublé, OneRepublic, Robbie Williams, and The 1975.

The full lineup was announced today by Julie Adenuga, the London voice of Beats 1, an Apple Music radio station that celebrates the best new music every day. Apple Music lets fans get even closer to their favorite performers during the Apple Music Festival with exclusive playlists, artist news and backstage interviews throughout September. The 10 spectacular nights of live performances will be made available live and on-demand to Apple Music members in 100 countries on their iPhone, iPad, iPod touch, Mac, PC, Apple TV and Android phones.