Apple Closes Two Vulnerabilities Used to Hack Your iPhones, iPads and Macs: Update Them

Apple is informing its users to update their devices immediately due to two new patches it has included to address two exploited zero-day threats attackers to hack iPhone, iPad or Mac.

If you still do not know what a zero-day attack is, in a nutshell it is a cyber attack on an application or system, the purpose of which is to execute malicious code due to the knowledge of vulnerabilities that the product manufacturer and users do not know about. And since they are unknown, these security holes have yet to be patched.

Thus, cybercriminals use exploits, malicious code that uses the specified vulnerability to infect a computer.

We recently learned that a new zero-day vulnerability is hiding in the Microsoft Diagnostic Tool (MSDT). Called DogWalk, it was and continues to be ignored by Microsoft as the company deemed it not eligible for immediate service.

Apple today releases macOS Monterey 12.5.1 and iOS 15.6.1/iPadOS 15.6.1 to fix two zero-day vulnerabilities which are reported to be actively exploited. Note that these two vulnerabilities are the same for all three operating systems.

The first one is registered as CVE-2022-32894. This incident is an out-of-bounds write vulnerability in the operating system kernel (a core component of the OS). Regarding the second one, known as CVE-2022-32893, This is a vulnerability in WebKit, the web browser engine used by Safari and other applications that can access the Internet.

At the same time, there are already seven vulnerabilities that Apple had to fix this year. The company advises that even though it is very likely that these attacks were used only in targeted attacks, users should install security updates as soon as possible.