Apple releases urgent zero-day patches for iOS, iPadOS and macOS, users note

Apple has just rushed to release a series of Rapid Security Response (RSR) updates to address a new zero-day vulnerability that is being actively exploited. The bug affects a range of its flagship hardware products, including iPhones, Macs, and iPads, directly threatening the security and integrity of these devices.

The vulnerability, with identifier CVE-2023-37450, was first reported by an unidentified freelance security researcher. The vulnerability resides in WebKit, an open-source application framework that provides the necessary components to build a web browser, which is used by Apple, Mozilla, and Google in iOS. It can be exploited by tricking users into visiting specially designed malicious content websites. This behavior could allow attackers to execute arbitrary code on targeted devices, thereby directly impacting user privacy and security.

Apple releases urgent zero-day patches for iOS, iPadOS and macOS, users note Picture 1

Apple emphasizes that the new RSR patch is only available for the latest versions of iOS, iPadOS, and macOS, starting with iOS 16.4.1, iPadOS 16.4.1, and macOS 13.3. To secure data and protect against malicious attacks, users should apply RSR patches immediately.

RSR patches were introduced as compact updates, intended to address security issues between major software updates on the operating system. Along with that are important security fixes to help users promptly address emerging threats.

In some cases, Apple may provide superior security updates to address vulnerabilities that are actively being exploited by hackers.

To activate, on your iPhone or iPad, go to Settings > General > Software Update > Automatic Updates, then make sure the "Security Feedback & System Files" option is turned on. On Mac: Choose Apple menu > System Settings. Click System Settings in the sidebar, then click Software Update on the right. Click the Show Details button next to Automatic Updates, then make sure "Install Security Responses and System Files" is turned on.

Jessica Tanner

Update 24 July 2023

You should read it

May be interested

Are viruses still a threat to cybersecurity?
viruses were once the top cybersecurity threat globally, but is it still the case? how common were viruses once and are they still dangerous today?
How is Computer Vision used to detect phishing attacks?
computer vision, computer vision, computer vision detects phishing attacks, computer vision detects phishing attacks, detects phishing attacks with computer vision
5 Multi-Factor Authentication Vulnerabilities and how to fix them
multi-factor authentication (mfa) elevates cybersecurity standards by requiring users to prove their identity in multiple ways before accessing the network.
What is Callback Phishing? How to fight it?
if you've ever received an email asking you to renew your service or pay a bill for a service you never purchased, you've encountered callback phishing.
What is Man-in-the-Disk Attack?
if you are an android user, you should know about the man-in-the-disk attack and the dangers it brings. this vulnerability allows intruders to take control of legitimate apps on your android device and use them to introduce malicious apps.
2022 could be the year of Linux malware
the number of malware (malicious code) detected on linux environments is increasing alarmingly, along with the popularity of internet of things (iot) devices.

Apple releases urgent zero-day patches for iOS, iPadOS and macOS, users note

You should read it

May be interested

Attack the network