Apple Releases Urgent Updates to Patch Actively Exploited Zero-Day Vulnerabilities ...

npub1zm7…pnd6

2024-11-21 10:35:08

Apple Releases Urgent Updates to Patch Actively Exploited Zero-Day Vulnerabilities

Apple released emergency security updates to fix two zero-day vulnerabilities that were exploited in attacks on Intel-based Mac systems.

"Apple is aware of a report that this issue may have been exploited," the company said in an advisory issued on Tuesday.

The two bugs were found in the macOS Sequoia JavaScriptCore (CVE-2024-44308) and WebKit (CVE-2024-44309) components of macOS.

The JavaScriptCore CVE-2024-44308 flaw allows attackers to achieve remote code execution through maliciously crafted web content. The other flaw, CVE-2024-44309, allows cross-site scripting (CSS) attacks.

See more:
The Hacker News:
https://thehackernews.com/2024/11/apple-releases-urgent-updates-to-patch.html

BleepingComputer:
https://www.bleepingcomputer.com/news/security/apple-fixes-two-zero-days-used-in-attacks-on-intel-based-macs/

SecurityWeek:
https://www.securityweek.com/apple-confirms-zero-day-attacks-hitting-intel-based-macs/

Infosecurity magazine:
https://www.infosecurity-magazine.com/news/apple-security-update/

#cybersecurity #apple #zeroday

Author Public Key

npub1zm7jduqq2nmxz5wxh4ujtm00g9vxzqa0r82yt7flvm67yje5gfaqa5pnd6

Seen on

wss://nostr.mom wss://relay.nostr.band

Show more details

Published at

2024-11-21 10:35:08

Kind type

1 Short Text Note

Event JSON

{ "id": "47f54fc24bd83b87410fbb7cbc172623e67c2862f175f67aa9f3f0f3f94919ff", "pubkey": "16fd26f00054f66151c6bd7925edef41586103af19d445f93f66f5e24b34427a", "created_at": 1732185308, "kind": 1, "tags": [ [ "t", "cybersecurity" ], [ "t", "apple" ], [ "t", "zeroday" ], [ "r", "https://thehackernews.com/2024/11/apple-releases-urgent-updates-to-patch.html" ], [ "r", "https://www.bleepingcomputer.com/news/security/apple-fixes-two-zero-days-used-in-attacks-on-intel-based-macs/" ], [ "r", "https://www.securityweek.com/apple-confirms-zero-day-attacks-hitting-intel-based-macs/" ], [ "r", "https://www.infosecurity-magazine.com/news/apple-security-update/" ] ], "content": "Apple Releases Urgent Updates to Patch Actively Exploited Zero-Day Vulnerabilities\n\nApple released emergency security updates to fix two zero-day vulnerabilities that were exploited in attacks on Intel-based Mac systems.\n\n\"Apple is aware of a report that this issue may have been exploited,\" the company said in an advisory issued on Tuesday.\n\nThe two bugs were found in the macOS Sequoia JavaScriptCore (CVE-2024-44308) and WebKit (CVE-2024-44309) components of macOS.\n\nThe JavaScriptCore CVE-2024-44308 flaw allows attackers to achieve remote code execution through maliciously crafted web content. The other flaw, CVE-2024-44309, allows cross-site scripting (CSS) attacks.\n\nSee more:\nThe Hacker News:\nhttps://thehackernews.com/2024/11/apple-releases-urgent-updates-to-patch.html\n\nBleepingComputer:\nhttps://www.bleepingcomputer.com/news/security/apple-fixes-two-zero-days-used-in-attacks-on-intel-based-macs/\n\nSecurityWeek:\nhttps://www.securityweek.com/apple-confirms-zero-day-attacks-hitting-intel-based-macs/\n\nInfosecurity magazine:\nhttps://www.infosecurity-magazine.com/news/apple-security-update/\n\n#cybersecurity #apple #zeroday", "sig": "d325db64dd9deb3fe395fd7ffc026ecf344280e7dbcf1da909ec21f86702fd9c194cbe293f4d6bc2ecf838296bf5ce5979f5809a0eb501f8ff148e635101ed3e" }