Apple Urges Mac Users to Update After Hackers Exploit Zero-Day Vulnerabilities
CNET/November 20, 2024
Apple is recommending that Mac users update their systems after revealing that hackers had exploited two vulnerabilities in its software.
The company issued two bug fixes on Tuesday addressing issues in WebKit and JavaScriptCore, which power Safari and other web content. WebKit, in particular, is a major target for hackers aiming to exploit the engine to infiltrate devices and gain access to private data.
In the first instance, Apple said one issue stemmed from "processing maliciously crafted web content," which can lead to an attacker running unauthorized code on a system. The problem was addressed through enhanced validation checks, according to Apple. The second issue involved a cross-site scripting attack. Apple said it resolved the vulnerability by improving cookie state management.
The company noted that it is aware of reports indicating these issues may have been actively exploited on Intel-based Mac systems. Apple also rolled out a security update for the iPad and iPhone related to the same vulnerabilities.
https://www.cnet.com/tech/services-and-software/apple-intelligence-arrives-with-ios-18-1-here-are-3-features-that-youll-use-daily/
I updated the phone and the Mac an hour ago.
= new reply since forum marked as read
Kick in to the DU tip jar?
This week we're running a special pop-up mini fund drive. From Monday through Friday we're going ad-free for all registered members, and we're asking you to kick in to the DU tip jar to support the site and keep us financially healthy.
As a bonus, making a contribution will allow you to leave kudos for another DU member, and at the end of the week we'll recognize the DUers who you think make this community great.