Apple has launched new updates for iOS and macOS in order to fix the zero-day vulnerabilities that were discovered.
On Monday, Apple released updates for its iOS and macOS operating systems to patch two zero-day vulnerabilities, CVE-2023-28206 and CVE-2023-28205, which were disclosed to the public last week. The updates are available for the latest iPhones, iPads, and Macs. The affected components are IOSurfaceAccelerator and WebKit, which allow for arbitrary code execution.
The zero-day vulnerabilities were reported to Apple by Google’s Threat Analysis Group and Amnesty International’s Security Lab, suggesting that they have likely been exploited by commercial spyware vendors. This comes a week after Google detailed several zero-day and n-day vulnerabilities exploited by commercial spyware vendors to target Android and iOS devices.
Apple recommends that all users install the latest updates in order to protect their devices from any potential attacks. The company also advises users to practice good security hygiene by avoiding suspicious websites and emails, as well as by not downloading applications from unknown sources.
Apple’s release of the iOS and macOS updates is an important step in ensuring the security and privacy of its users. It is a reminder that users must always be vigilant in protecting their devices from potential threats.
Key Points:
- Apple released iOS and iPadOS 16.4.1 and macOS Ventura 13.3.1 updates to patch two zero-day vulnerabilities, CVE-2023-28206 and CVE-2023-28205.
- The vulnerabilities were reported to Apple by Google’s Threat Analysis Group and Amnesty International’s Security Lab.
- Apple also released iOS and iPadOS 15.7.5, macOS Monterey and Big Sur updates to fix CVE-2023-28206.
- Apple recommends users install the latest updates and practice good security hygiene.
- Apple’s release of the iOS and macOS updates is an important step in ensuring the security and privacy of its users.