Apple has announced new software updates across its product range to address two significant security vulnerabilities that could have been used to compromise users’ devices running the iOS mobile operating system. The company has identified these issues as zero-day vulnerabilities, meaning they were unknown prior to exploitation.
In security alerts on its website, Apple indicated that these vulnerabilities might have been exploited in sophisticated attacks targeting specific individuals utilising iOS. However, details about the perpetrators or the extent of the breaches remain unclear, and it is currently not known how many users may have been affected. Apple has not provided comments to inquiries from TechCrunch regarding the incidents.
The discovery of one of these vulnerabilities is credited to security researchers from Google’s Threat Analysis Group, which focuses on investigating cyberattacks often linked to state-sponsored actors. This association suggests that the attacks may have been orchestrated or facilitated by a government entity, a method frequently seen in targeted cyber espionage campaigns that deploy spyware or similar tools.
Specifically, one vulnerability impacts Apple’s Core Audio, a core component that enables audio interactions across its devices. Exploiting this flaw could allow malicious actors to execute harmful code simply by processing an audio stream from a specially crafted media file. The second vulnerability, uncovered solely by Apple, pertains to the bypassing of pointer authentication—a security feature designed to prevent attackers from injecting code into device memory.
To safeguard users, Apple has released updates, including macOS Sequoia version 15.4.1 and iOS version 18.4.1 for iPhones and iPads, which resolve these security issues. Additionally, updates have been provided for Apple TV and the Vision Pro mixed-reality headset, ensuring a comprehensive approach to bolstering security across its ecosystem.
With these updates, Apple continues its commitment to user safety while addressing vulnerabilities that may have put customers at risk. Users are encouraged to install these updates promptly to ensure their devices remain secure against potential cyber threats.
Fanpage: TechArena.au
Watch more about AI – Artificial Intelligence
