Re: [FD] : "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)

Re: [FD] : "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)
嗯，用户发来了一段邮件内容，看起来是关于一个iOS漏洞的讨论。他让我用中文总结一下，控制在100字以内，而且不需要特定的开头。首先，我需要理解邮件的主要内容。邮件中提到Joseph Goyd在Full Disclosure邮件列表中发布了一个漏洞报告，链接到了GitHub仓库，里面有关于Glass Cage iOS攻击链的信息。然后有人回复说他的文章无法访问，显示404错误。接着还有其他人的回复，讨论整个账户是否崩溃了。所以，主要内容是关于一个针对iOS 18的零点击iMessage漏洞，导致设备被远程控制甚至损坏。同时，相关的技术细节页面已经无法访问。总结的时候要包括这些关键点：漏洞名称、影响、攻击方式、后果以及技术细节的问题。现在我要把这些信息浓缩到100字以内，确保不遗漏重要信息。可能需要提到CVE编号和CNVD编号，但用户可能更关注漏洞本身的影响和后果。所以重点放在攻击链、远程控制、设备损坏以及技术细节页面不可用上。最后检查一下字数是否符合要求，并确保语言简洁明了。 </think> Joseph Goyd在Full Disclosure邮件列表中分享了一个针对iOS 18的零点击iMessage漏洞（CVE-2025-24085/CVE-2025-24201），该漏洞可导致设备被远程控制并可能损坏。相关技术细节页面已无法访问。 2025-10-30 01:5:58 Author: seclists.org(查看原文) 阅读量:21 收藏

Full Disclosure mailing list archives

From: josephgoyd via Fulldisclosure <fulldisclosure () seclists org>
Date: Wed, 29 Oct 2025 11:15:18 +0000

The exploit I caught in the wild and the flow of the attack chain are in this repo: 
https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201

The report was constructed via log analysis.

-------- Original Message --------
On Wednesday, 10/29/25 at 01:44 Christoph Gruber <list () guru at> wrote:
It seems, the whole account is down
--
Christoph Gruber

Am 29.10.2025 um 03:37 schrieb Noor Christensen <kchr+fd () fripost org>:

On Thu Oct 2, 2025 at 11:45 PM CEST, josephgoyd via Fulldisclosure wrote:

----------------------------------------------------------------------

Full Technical Disclosure:

[Glass Cage iOS Attack Chain](https://weareapartyof1.substack.com/p/glass-cage-zero-day-imessage-attack)


Hi Joseph,

Looks like your post with the technical details is down; I'm getting a 404 since
yesterday.

-- kchr
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/


_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/

Current thread:

Re: [FD] : "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885) josephgoyd via Fulldisclosure (Oct 02)
- Re: [FD] : "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885) Noor Christensen (Oct 28)
  - Re: : "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885) Christoph Gruber (Oct 29)
    - Re: [FD] : "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885) josephgoyd via Fulldisclosure (Oct 29)

文章来源: https://seclists.org/fulldisclosure/2025/Oct/31
如有侵权请联系:admin#unsafe.sh