Apple says,
Apple has released new software updates to its product line to fix two security vulnerabilities that the company said may have been actively used to hack its mobile software, iOS.
In security consultations posted on its website, Apple has confirmed that it has determined Two zero day vulnerabilitieswhich “may have been operated on an extremely complicated attack on specific iOS targeted persons.”
Errors are considered zero days Because they were not known to Apple as they opened.
It is not yet known who is behind the attacks or how many Apple customers have been targeted or if it has been successfully compromised. Apple spokesman did not return TechCrunch request.
Apple credits the opening of one of the two security researchers working at Google’s Analysis Analysis Group, which explores the government -backed cyberattack. This may indicate that the attacks targeting Apple’s customers have been launched or coordinated by a National State or Government Agency. It is known that some government -backed cyberattacks include The use of remotely planted spyware and Other devices that divergeS
A Google spokesman did not comment immediately when it was reached by TechCrunch.
Apple said one of the bugs affects Apple’s Coreaudio, the system -level component that Apple uses in its various products to allow developers to interact with the audio of the device. Apple said the error can be operated by processing audio flow in a maliciously crafted media file that can allow The performance of a malicious code on an affected Apple device.
The other mistake Apple took a single loan for the discovery allows the attacker to bypass the authentic’s authentication, a security feature that Apple used in its software To make the attackers more difficult to corrupt or otherwise inject a malicious code into the memory of the device.
Apple released a MacOS Sequoia Software UpdateMake the software version to 15.4.1 and released iOS 18.4.1, which fixes security errors on the iPhone and iPad. Apple TV and the headset with a mixed reality of the company Vision Pro also received the same security updates.