Connect with us

Hi, what are you looking for?

Technology

Apple fixes new zero-day exploited to hack macOS, iOS devices

Apple logo


Apple log with rainbow background

Apple has released security updates to fix two zero-day vulnerabilities, with one publicly disclosed and the other exploited in the wild by attackers to hack into iPhones and Macs.

The first zero-day patched today (tracked as CVE-2022-22587) [12] is a memory corruption bug in the IOMobileFrameBuffer that affects iOS, iPadOS, and macOS Monterey.

Successful exploitation of this bug leads to arbitrary code execution with kernel privileges on compromised devices.

“Apple is aware of a report that this issue may have been actively exploited,” Apple said when describing the zero-day bug.

The complete list of impacted devices includes:

  • iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation)
  • and macOS Monterey

The bug was found by an anonymous researcher, Meysam Firouzi (@R00tkitSMM) of MBition – Mercedes-Benz Innovation Lab, and Siddharth Aeri (@b1n4r1b01).

Firouzi and Aeri told BleepingComputer that they both found the bug independently and were unaware that threat actors exploited it in the wild.

The second zero-day is a Safari WebKit bug in iOS and iPadOS that allowed websites to track your browsing activity and users’ identities in real-time.

Advertisement. Scroll to continue reading.

The bug was first disclosed to Apple by Martin Bajanik of FingerprintJS on November 28th, 2021, and publicly disclosed on January 14th, 2022. After the researcher disclosed the bug, it was assigned the CVE-2022-22594 and fixed in today’s iOS 15.3 and iPadOS 15.3 security update.

These bugs are the first zero-day vulnerabilities fixed by Apple in 2022.

However, Apple fixed what felt like a never-ending stream of zero-day bugs in 2021 that were used in attacks against iOS and macOS devices.

These bugs included numerous zero-day vulnerabilities used to install the Pegasus spyware on the iPhones of journalists, activists, and politicians.



Source link

Click to comment

Leave a Reply

Latest

Top Stories

You’ve seen it before. An amazingly talented gaming founder teams up with a top-tier studio, promising to create a wondrous game experience built on...

Technology

Source: Matthew Cassinelli / iMore On Tuesday, Apple previewed new accessibility features coming to their platforms this year, including new navigation, health, and communication...

Technology

Source: Joseph Keller/iMore Until very recently, the prospect of a USB-C iPhone seemed like a pipe dream. Then in the space of just a...

Online Business Success

Gold bars from the vault of a bank are seen in this illustration picture taken in Zurich, Switzerland, on November 20, 2014. — Reuters...

Top Stories

Bitcoin (BTC) struggled to recover its latest losses on May 21 after Wall Street trading provided zero respite. BTC/USD 1-hour candle chart (Bitstamp). Source:...

Loan And Finance

Electric vehicles are becoming increasingly popular as gas prices skyrocket. In fact, automakers plan to pivot to largely electric lineups in the coming decade,...

Advertisement

You May Also Like

Uncategorized

Introductions get a lot of attention. I’ve explored the topic of how to write them even though as a reader, I always skip them....

SEO Guide

There are all kinds of pictures of the world on the internet, but to find one of these specific pictures that you want to...

Online Business Success

The internet is now our nervous system. We are constantly streaming and buying and watching and liking, our brains locked into the global information...

Online Business Success

You can think of link building in many ways. I like to call it tedious, painful, and a test of patience. It’s also necessary...

Advertisement