![](\"https:\/\/tctechcrunch2011.files.wordpress.com\/2016\/07\/gettyimages-490626518.jpg?w=738\")
<\/p>\n<\/p>\n
Google\u2019s Project Zero has been on a roll lately, unveiling sophisticated bugs in Cloudflare<\/a>, LastPass<\/a>\u00a0and now Broadcom, a Wi-Fi chip supplier whose product is found in iPhones, Nexuses and Samsung devices.<\/p>\n Apple patched the bug in a security update yesterday (10.3.1<\/a> \u2014 and if you\u2019re an Apple customer, you should install this update right away) and Project Zero researcher\u00a0Gal Beniamini explained the exploit in detail in a blog post<\/a> today.<\/p>\n \u201cAn attacker within range may be able to execute arbitrary code on the Wi-Fi chip,\u201d Apple said\u00a0in its security update notes<\/a>. This is not good! It is quite bad, in fact, and that might explain why Apple pushed out 10.3.1 so quickly (10.3 was released only a week ago). Apple and Google declined to comment.<\/p>\n By chaining together a series of exploits on the Broadcom chip, Beniamini was able to demonstrate a \u201cfull device takeover by Wi-Fi proximity alone, requiring no user interaction.\u201d This means an attacker on a shared Wi-Fi network could quietly compromise your device without ever tipping you off.<\/p>\n Beniamini demonstrated his research\u00a0on a Nexus 6P, which might account for the equivocating \u201cmay be able\u201d in Apple\u2019s security update. Broadcom\u2019s chips are widely used in the mobile phone industry, so the issue\u00a0extends beyond Apple into other manufacturers, as well.<\/p>\n \u201cBroadcom has been incredibly responsive and helpful, both in fixing the vulnerabilities and making the fixes available to affected vendors. For a complete timeline, see the<\/a> bug<\/a> tracker<\/a> entries<\/a>,\u201d Beniamini wrote.<\/p>\n Expect more disclosures from Beniamini \u2014 the researcher promised to divulge more about the vulnerability soon.<\/p>\n Featured Image: Bloomberg\/Getty Images<\/small><\/p>\n","protected":false},"excerpt":{"rendered":"![\"\"](\"https:\/\/tctechcrunch2011.files.wordpress.com\/2016\/07\/gettyimages-490626518.jpg?w=680\")
Google’s Project Zero has been on a roll lately, unveiling sophisticated bugs in Cloudflare, LastPass and now Broadcom, a Wi-Fi chip supplier whose product is found in iPhones, Nexuses and Samsung devices. Read More<\/a><\/p>\n\n<\/img><\/a>
<\/img><\/a>
<\/img><\/a>
<\/img><\/a>
<\/img><\/a>
<\/img><\/a>\n<\/div>\n
<\/p>\n","protected":false},"author":5817,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[25],"tags":[59,66,26],"class_list":["post-337612","post","type-post","status-publish","format-standard","hentry","category-technology","tag-media","tag-techcrunch","tag-technology"],"_links":{"self":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/337612","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/users\/5817"}],"replies":[{"embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/comments?post=337612"}],"version-history":[{"count":0,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/posts\/337612\/revisions"}],"wp:attachment":[{"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/media?parent=337612"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/categories?post=337612"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/people.utm.my\/asmawisham\/wp-json\/wp\/v2\/tags?post=337612"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}