Hello, welcome to the Wednesday, July 28, 2021 edition of the Sansanet Storm Center's Stormcast. My name is Johannes Ulrich. And I'm recording from Jacksonville, Florida. Yesterday, I talked about Apple releasing a patch for CVE 2021-887. that particular vulnerability affected iOS as well as a Mac OS.

Now, whenever Apple releases patches, the description is very brief. It's usually literally a sentence,

but it also mentioned that the vulnerability had already been exploited

in the wild. So today we got a blog post by a security researcher, Sarr Amar, with great detail

about this particular vulnerability. Now if you wonder how Sarr was able so quickly to figure all of this out, apparently

Sarr already had it figured out back in March.

And as proof that this is something that Sarr was working on back then, Sarr actually

tweeted a hash of a file that they now posted on the blog post, and it has

sort of a quick outline of what happened with this vulnerability.

So while SAR was able to find a vulnerability, at the time, SAR didn't have time to actually develop a proof of concept exploit.

I was going to that later. And now, of course, they saw that this vulnerability had been patched.

And that's why Sarr published a blog post with quite a bit of detail, proof of concept code and such,

how to exploit this vulnerability.

Part of the most dangerous way how this could be exploited is as an attack against the web browser.

So something posted on a website could essentially trigger this vulnerability in unpatched versions of iOS and

macOS. And now with all of this detail out there, of course, an exploit will likely be public

and more accessible soon. So this has now really become a patch now vulnerability. Apply this iOS

and macOS patch that was released on Monday. And then we got two interesting vulnerabilities

in Cimbra. If you're not familiar with Cimbra, it's an open source webmail client. So if you aren't

into cloud and you would like to run things on premise, then Simpra is a fairly good option

for you. But if you do you Simra, then please patch. The first vulnerability here is a DOM-based cross-site scripting vulnerability.

Now, one of the hardest web applications to write when it comes to cross-site scripting is a

...