Threat Wire Covers iOS Exploit Kits, Android Sideloading Safeguards and OpenClaw Security
· 10:23 · Watch on YouTube ↗
Summary
Threat Wire covers Nvidia's Nemo Claw security layer for OpenClaw, the Coruna and Dark Sword iOS exploit kits and Apple's update advice, Android's sideloading safeguards, and a hack that disabled breathalyzer-based car interlocks.
Key points
- Nvidia announced Nemo Claw, a stack for installing OpenClaw with isolated sandboxing and added security and privacy; these are Nvidia's stated capabilities.
- The Coruna exploit kit targeted iOS 13.0–17.2.1, using a hidden iframe on a malicious website to deliver exploits and steal financial information and credentials. The transcript says Apple released a patch.
- Dark Sword targeted iOS 18.4–18.7 and could deploy with minimal or, in some cases, zero interaction. The JavaScript exploit chain accessed sensitive information and exfiltrated it before cleaning itself up.
- Coruna and Dark Sword were found on the same servers; the presenters say this means they were most likely deployed by the same, unnamed APT.
- Apple issued advisories for the exploit kits. The video recommends updating to the latest supported iOS version and considering Lockdown Mode when an update is unavailable.
- Android's advanced flow allows unverified app sideloading while adding developer-mode confirmation, a restart and a 24-hour delay intended to help users resist scammer pressure. The flow is rolling out and is present as early as Android 16.1.
- A hack at an unnamed breathalyzer measurement company reportedly caused its hardware to fail, leaving thousands unable to start cars with installed breathalyzer interlocks.
Article Details
- Topics
- [00:16] OpenClaw security concerns and Nvidia's Nemo Claw stack
- [01:20] Coruna exploit kit targeting iOS devices
- [02:43] Dark Sword exploit chain, shared servers and Apple update advice
- [04:43] Android's safeguards for sideloading unverified apps
- [07:10] Breathalyzer company hack disrupting car interlock hardware