![]() ![]() ( ThreatPost) Encrypted ZIP files can have two correct passwords The vulnerability allows an application to execute arbitrary code with kernel privileges, according to Apple, which says there is a report that it “may have been actively exploited.” The patches address two flaws, which basically impact any Apple device that can run either iOS 15 or the Monterey version of its desktop OS. Patches are available for effected devices running iOS 15.6.1 and macOS Monterey 12.5.1. The patches are for vulnerabilities that allow attackers to execute arbitrary code and ultimately take over devices. On your Mac, go to > About this Mac > Software Update.IPhone users urged to update to patch 2 zero-daysĪpple is urging macOS, iPhone and iPad users to immediately install updates this week that includes fixes for two zero-days under active attack. On your iPhone, go to Settings > General > Software Update and choose between iOS 15.7 and iOS 16. ![]() Most vulnerabilities are used in targeted attacks, but some are used more widely, so it’s always good practice to update your iPhone and other Apple devices as soon as possible. In January, Apple patched two other exploited zero-days that enabled code execution with kernel privileges (CVE-2022-22587) and web browsing activity tracking (CVE-2022-22594). ![]()
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |