Apple zero day hack.Apple emergency update fixes zero-day used to hack Macs, Watches
Looking for:
Apple patches new zero-day exploited to hack iPhones, iPads, Macs. |
Apple zero day hack
Apple has released security updates on Thursday to address two zero-day vulnerabilities exploited by attackers to hack iPhones, iPads, and Macs. Zero-day security bugs are flaws the software vendor is unaware of and hasn't patched. In some cases, they also have publicly available proof-of-concept exploits or may be actively exploited in the wild.
In security advisories published today, Apple said that they're aware of reports the issues "may have been actively exploited. The two flaws are an out-of-bounds write issue CVE in the Intel Graphics Driver that allows apps to read kernel memory and an out-of-bounds read issue CVE in the AppleAVD media decoder that will enable apps to execute arbitrary code with kernel privileges. The bugs were reported by anonymous researchers and fixed by Apple in iOS Apple disclosed active exploitation in the wild, however, it did not release any additional info regarding these attacks.
Withholding this information is likely designed to allow the security updates to reach as many iPhones, iPads, and Macs as possible before threat actors pick up on the details and start abusing the now-patched zero-days. Even though these zero-days were likely only used in targeted attacks, it's still strongly advised to install today's security updates as soon as possible to block potential attack attempts.
In January, Apple patched two more actively exploited zero-days that can enable attackers to achieve arbitrary code execution with kernel privileges CVE and track web browsing activity and the users' identities in real-time CVE In February, Apple released security updates to fix a new zero-day bug exploited to hack iPhones, iPads, and Macs, leading to OS crashes and remote code execution on compromised devices after processing maliciously crafted web content.
The company also had to deal with an almost unending stream of zero-days exploited in the wild to target iOS, iPadOS, and macOS devices throughout That list includes multiple flaws used to deploy NSO's Pegasus spyware on iPhones belonging to journalists, activists, and politicians. Apple emergency update fixes zero-day used to hack Macs, Watches. Always have a full keypad with you with Apple's Magic Keyboard deal. Hackers steal crypto from Bitcoin ATMs by exploiting zero-day bug. Not a member yet?
Register Now. To receive periodic updates and news from BleepingComputer , please use the form below. Read our posting guidelinese to learn what content is prohibited. March 31, PM 0. Five zero-days patched by Apple this year In January, Apple patched two more actively exploited zero-days that can enable attackers to achieve arbitrary code execution with kernel privileges CVE and track web browsing activity and the users' identities in real-time CVE Sergiu Gatlan Sergiu Gatlan is a reporter who covered cybersecurity, technology, Apple, Google, and a few other topics at Softpedia for more than a decade.
Email or Twitter DMs for tips. Previous Article Next Article. You may also like:. Popular Stories. Newsletter Sign Up To receive periodic updates and news from BleepingComputer , please use the form below. Login Username. Remember Me. Sign in anonymously. Sign in with Twitter Not a member yet? Reporter Help us understand the problem. What is going on with this comment? Spam Abusive or Harmful Inappropriate content Strong language Other Read our posting guidelinese to learn what content is prohibited.
Comments
Post a Comment