Apple patches new zero-day exploited to hack iPhones, iPads, Macs

Reading Time: 1 Minute

The complete list of impacted devices is quite extensive, as the bug affects older and newer models, and it includes:

• iPhone 6s and later,
• iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)
• Macs running macOS Monterey

Although this zero-day was likely only used in targeted attacks, it’s still strongly recommended to install the updates as soon as possible to block potential attack attempts.

Third zero-day patched this year by Apple

In January, Apple patched two other zero-days exploited in the wild that could allow threat actors to achieve arbitrary code execution with kernel privileges (CVE-2022-22587) and track browsing activity and users’ identities in real-time (CVE-2022-22594).

These first two zero-days impacted iPhones (iPhone 6s and up), Macs running macOS Monterey, and multiple models of iPads.

While Apple has patched only three zero-days since the start of 2022, the company had to deal with an almost interminable stream of zero-days exploited in the wild to target iOS, iPadOS, and macOS devices.

See Also: Offensive Security Tool: Stratus Red Team

The list includes multiple zero-day flaws used to install NSO’s Pegasus spyware on iPhones belonging to journalists, activists, and politicians.

See Also: How ILOVEYOU worm became the first global computer virus pandemic

Source: www.bleepingcomputer.com

Source Link