Apple ships that recent “Rapid Response” spyware patch to everyone, fixes a second zero-day – Naked Security

Apple users were urged to download a Rapid Response patch to fix a web-browsing security hole that had been exploited in real-world spyware attacks. The bug fix addressed a code execution vulnerability and was released as an emergency measure. While not a true zero-click attack, where cybercriminals can take over a device without any user interaction, the exploit allowed malware to be invisibly implanted by simply visiting a compromised webpage. Attackers often combine this type of exploit with a second code execution bug to gain full control over a device. Apple has released system upgrades that include fixes for these vulnerabilities, along with other security updates. Users are advised to download and install these updates immediately to protect against known exploits and theoretical attacks.