Apple corrects a new security flaw used in “ extremely sophisticated attack ”

Apple corrects a new security flaw used in “ extremely sophisticated attack ”

Apple published patches For a bug, he says “may have been exploited in an extremely sophisticated attack against specific targeted individuals”, citing a report.

THE day zero Bug was found in webkit, the browser engine feeding Safari and other applications, and allowed the hackers to get out of the protective sandbox of webkit with “maliciously artisanal web content”, according to Apple. A sandbox is part of the operating system which, even if it is compromised, can prevent hackers from accessing data in other parts of the system.

The patch was published Tuesday for Macs,, Iphones and iPad,, Safariand it is Vision Pro Headset.

Contact us

Do you have more information on Apple vulnerabilities or cyber attacks against Apple users? From a device and a non-work network, you can contact Lorenzo Franceschi-Bicchiera safely on the signal at +1 917 257 1382, or via Telegram and Keybase @lorenzofb, or e-mail. You can also contact Techcrunch via Secure.

Apple noted that the attack was exploited against the devices performing software “before iOS 17.2”.

Neither hackers nor targets have been disclosed. Apple did not respond to a request for comments.

In February, Apple Used the same language – “an extremely sophisticated attack against specific targeted individuals” – for another bug, but there is no evidence that the two attacks are linked. Before this February patch, Apple had never used this wording before.

Source link

Leave a Reply

Your email address will not be published. Required fields are marked *