Summary

Apple releases software updates to fix two zero-day security vulnerabilities in its mobile operating system. The vulnerabilities, one affecting Core Audio and the other allowing pointer authentication bypass, may have been actively used to hack iOS users. Apple credited Google's Threat Analysis Group with discovering one of the bugs, which may indicate government-backed cyberattacks.

Key Points

• The two zero-day vulnerabilities were unknown to Apple as they were being exploited, making them potentially highly dangerous for affected customers.

• One of the bugs affects Apple's Core Audio system-level component, allowing malicious code execution on an affected device.

• The other bug allows attackers to bypass pointer authentication, a security feature used in Apple's software to prevent malicious code injection.

Why It Matters

The patching of these zero-day vulnerabilities is significant because it prevents potential attacks on iOS users and demonstrates Apple's commitment to ensuring the security of its customers.

Author

Zack Whittaker