Re: [FD] : "Glass Cage" – Zero-Click iMessage → Persistent iOS Compromise + Bricking (CVE-2025-24085 / 24201, CNVD-2025-07885)

[Joseph Goydish II via Fulldisclosure <fulldisclosure () seclists org>]

Hey Patrick, I understand the doubt.

However… what’s not slop is reproducible logs I provided a video of and the testable, working exploit I provided.

 Neither is the upstream patches that can be tracked from the disclosure dates to the cve’s listed in the report.

The exploit was caught in the wild, reversed engineered via log analysis and the logs provided are simply observed 
behavior. Please feel free to independently test the exploit.

Your assumptions and rhetoric do not help in why people use this mailing list, for good faith reporting.

-------- Original Message --------
On Thursday, 10/30/25 at 06:03 Patrick <kroppoloe () protonmail ch> wrote:
This is fake and AI generated.

Sent from Proton Mail for iOS.

-------- Original Message --------
On Thursday, 10/30/25 at 02:18 josephgoyd via Fulldisclosure <fulldisclosure () seclists org> wrote:
The exploit I caught in the wild and the flow of the attack chain are in this repo: 
https://github.com/JGoyd/Glass-Cage-iOS18-CVE-2025-24085-CVE-2025-24201

The report was constructed via log analysis.

-------- Original Message --------
On Wednesday, 10/29/25 at 01:44 Christoph Gruber <list () guru at> wrote:
It seems, the whole account is down
--
Christoph Gruber

> Am 29.10.2025 um 03:37 schrieb Noor Christensen <kchr+fd () fripost org>:
>
> On Thu Oct 2, 2025 at 11:45 PM CEST, josephgoyd via Fulldisclosure wrote:
> > > ----------------------------------------------------------------------
> > >
> > > Full Technical Disclosure:
> > >
> > > [Glass Cage iOS Attack Chain](https://weareapartyof1.substack.com/p/glass-cage-zero-day-imessage-attack)
>
> Hi Joseph,
>
> Looks like your post with the technical details is down; I'm getting a 404 since
> yesterday.
>
> -- kchr
> _______________________________________________
> Sent through the Full Disclosure mailing list
> https://nmap.org/mailman/listinfo/fulldisclosure
> Web Archives & RSS: https://seclists.org/fulldisclosure/

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/
_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: https://seclists.org/fulldisclosure/