Apple Issues Urgent Security Update to Fix Critical Vulnerabilities Exploited in Cyberattacks
![](https://en.thawabit.net/wp-content/uploads/2024/12/image-32.png)
Apple Releases Security Update to Address Exploited Vulnerabilities in Mac Devices
Apple has issued a new security update, urging all its users to install it immediately after the discovery of two security vulnerabilities that were exploited in cyberattacks targeting Mac devices. This was reported by TechCrunch.
In a statement on its official website, Apple acknowledged its awareness of the vulnerabilities, which were likely exploited in attacks on Mac systems using Intel processors. The company classified these attacks as “zero-day” vulnerabilities, meaning they exploited flaws unknown to developers at the time of their use.
Updates and Security Fixes
To address the issue, Apple has rolled out an update for macOS, along with security patches for iPhone and iPad devices, including users running iOS 17.
Attack Details and Targets
So far, the identity of the attackers and the number of affected devices remain unclear, and it has not been confirmed whether any breaches were successful.
According to Apple, the vulnerabilities were discovered by cybersecurity researchers from Google’s Threat Analysis Group, which specializes in investigating government-backed hacking and cyberattacks. This suggests the possible involvement of state-sponsored actors in the incidents.
Targeted Vulnerabilities
The attacks targeted the WebKit and JavaScriptCore web engines, which power Apple’s Safari browser and other web content on its devices. WebKit is a frequent target for hackers, who exploit its vulnerabilities to breach devices and steal user data.
Apple indicated that these vulnerabilities could be exploited by tricking vulnerable devices into processing malicious web content, enabling the execution of harmful code that could inject malware into targeted systems.
User Recommendation
In conclusion, Apple strongly advised all users of Mac, iPhone, and iPad devices to install the latest security updates promptly to safeguard their devices and personal data against these vulnerabilities.