https://www.bleepingcomputer.com/news/apple/apple-releases-emergency-update-to-fix-zero-day-exploited-in-attacks/ BleepingComputer.com logo * * * * [ ] [Login] [Sign up] * * * * [ ] [Login] [Sign up] * News + Featured + Latest + MOVEit Transfer customers warned to patch new critical flaw MOVEit Transfer customers warned to patch new critical flaw + Cisco warns of bug that lets attackers break traffic encryption Cisco warns of bug that lets attackers break traffic encryption + CISA warns govt agencies to patch actively exploited Android driver CISA warns govt agencies to patch actively exploited Android driver + Critical TootRoot bug lets attackers hijack Mastodon servers Critical TootRoot bug lets attackers hijack Mastodon servers + Microsoft finally fixes broken Surface Pro X laptop cameras Microsoft finally fixes broken Surface Pro X laptop cameras + RomCom hackers target NATO Summit attendees in phishing attacks RomCom hackers target NATO Summit attendees in phishing attacks + VMware warns of exploit available for critical vRealize RCE bug VMware warns of exploit available for critical vRealize RCE bug + Amazon's AppStore is getting more apps and games on Windows 11 Amazon's AppStore is getting more apps and games on Windows 11 * Downloads + Latest + Most Downloaded + Qualys BrowserCheck Qualys BrowserCheck + STOPDecrypter STOPDecrypter + AuroraDecrypter AuroraDecrypter + FilesLockerDecrypter FilesLockerDecrypter + AdwCleaner AdwCleaner + ComboFix ComboFix + RKill RKill + Junkware Removal Tool Junkware Removal Tool * VPNs + Popular + Best VPNs Best VPNs + How to change IP address How to change IP address + Access the dark web safely Access the dark web safely + Best VPN for YouTube Best VPN for YouTube * Virus Removal Guides + Latest + Most Viewed + Ransomware + Remove the Theonlinesearch.com Search Redirect Remove the Theonlinesearch.com Search Redirect + Remove the Smartwebfinder.com Search Redirect Remove the Smartwebfinder.com Search Redirect + How to remove the PBlock+ adware browser extension How to remove the PBlock+ adware browser extension + Remove the Toksearches.xyz Search Redirect Remove the Toksearches.xyz Search Redirect + Remove Security Tool and SecurityTool (Uninstall Guide) Remove Security Tool and SecurityTool (Uninstall Guide) + How to Remove WinFixer / Virtumonde / Msevents / Trojan.vundo How to Remove WinFixer / Virtumonde / Msevents / Trojan.vundo + How to remove Antivirus 2009 (Uninstall Instructions) How to remove Antivirus 2009 (Uninstall Instructions) + How to remove Google Redirects or the TDSS, TDL3, or Alureon rootkit using TDSSKiller How to remove Google Redirects or the TDSS, TDL3, or Alureon rootkit using TDSSKiller + Locky Ransomware Information, Help Guide, and FAQ Locky Ransomware Information, Help Guide, and FAQ + CryptoLocker Ransomware Information Guide and FAQ CryptoLocker Ransomware Information Guide and FAQ + CryptorBit and HowDecrypt Information Guide and FAQ CryptorBit and HowDecrypt Information Guide and FAQ + CryptoDefense and How_Decrypt Ransomware Information Guide and FAQ CryptoDefense and How_Decrypt Ransomware Information Guide and FAQ * Tutorials + Latest + Popular + How to enable Kernel-mode Hardware-enforced Stack Protection in Windows 11 How to enable Kernel-mode Hardware-enforced Stack Protection in Windows 11 + How to use the Windows Registry Editor How to use the Windows Registry Editor + How to backup and restore the Windows Registry How to backup and restore the Windows Registry + How to open a Windows 11 Command Prompt as Administrator How to open a Windows 11 Command Prompt as Administrator + How to start Windows in Safe Mode How to start Windows in Safe Mode + How to remove a Trojan, Virus, Worm, or other Malware How to remove a Trojan, Virus, Worm, or other Malware + How to show hidden files in Windows 7 How to show hidden files in Windows 7 + How to see hidden files in Windows How to see hidden files in Windows * Deals + Categories + eLearning eLearning + IT Certification Courses IT Certification Courses + Gear & Gadgets Gear + Gadgets + Security Security * Forums * More + Startup Database + Uninstall Database + Glossary + Chat on Discord + Send us a Tip! + Welcome Guide * Home * News * Apple * Apple releases emergency update to fix zero-day exploited in attacks * * Apple releases emergency update to fix zero-day exploited in attacks By Sergiu Gatlan * July 10, 2023 * 02:01 PM * 4 Apple Apple has issued a new round of Rapid Security Response (RSR) updates to address a new zero-day bug exploited in attacks and impacting fully-patched iPhones, Macs, and iPads. "Apple is aware of a report that this issue may have been actively exploited," the company says in iOS and macOS advisories when describing the CVE-2023-37450 vulnerability reported by an anonymous security researcher. "This Rapid Security Response provides important security fixes and is recommended for all users," Apple warns on systems where the RSR patches are being delivered. RSR patches have been introduced as compact updates designed to address security concerns on the iPhone, iPad, and Mac platforms, and they serve the purpose of resolving security issues that arise between major software updates, according to this support document. Furthermore, some out-of-band security updates may also be employed to counter security vulnerabilities actively exploited in attacks. If you turn off automatic updates or don't install Rapid Security Responses when offered, your device will be patched as part of future software upgrades. Today's list of emergency patches includes: * macOS Ventura 13.4.1 (a) * iOS 16.5.1 (a) * iPadOS 16.5.1 (a) * Safari 16.5.2 The flaw has been found in the WebKit browser engine developed by Apple, and it allows attackers to gain arbitrary code execution on targeted devices by tricking the targets into opening web pages containing maliciously crafted content. The company addressed this security weakness with improved checks to mitigate exploitation attempts. macOS 13.4.1 (a) RSR patchmacOS 13.4.1 (a) RSR patch (BleepingComputer) Tenth zero-day patched in 2023 Since the start of 2023, Apple has patched ten zero-day flaws exploited in the wild to hack iPhones, Macs, or iPads. Earlier this month, Apple addressed three zero-days (CVE-2023-32434, CVE-2023-32435, and CVE-2023-32439) exploited to deploy Triangulation spyware on iPhones via iMessage zero-click exploits. It also fixed three more zero-days (CVE-2023-32409, CVE-2023-28204, and CVE-2023-32373) in May, the first reported by Amnesty International Security Lab and Google Threat Analysis Group researchers and likely used to install mercenary spyware. In April, Apple fixed two other zero-days (CVE-2023-28206 and CVE-2023-28205) used as part of exploit chains of Android, iOS, and Chrome zero-day and n-day flaws to deploy spyware on devices belonging to high-risk targets. In February, Apple patched another WebKit zero-day (CVE-2023-23529) exploited to gain code execution on vulnerable iPhones, iPads, and Macs. Related Articles: Apple fixes zero-days used to deploy Triangulation spyware via iMessage Apple fixes three new zero-days exploited to hack iPhones, Macs CISA orders govt agencies to patch iPhone bugs exploited in attacks CISA orders agencies to patch iPhone bugs abused in spyware attacks Russia says US hacked thousands of iPhones in iOS zero-click attacks * Apple * iOS * iPad * iPhone * Mac * macOS * Rapid Security Response * Zero-Day * * * * * Sergiu Gatlan Sergiu Gatlan has covered cybersecurity, technology, and other news beats for more than a decade. Email or Twitter DMs for tips. * Previous Article * Next Article Comments * nauip Photo nauip - 4 hours ago + + "your device be patched as part of future software upgrades." I think somebody forgot a word there. Or we're celebrating write like a pirate day. * serghei Photo serghei - 4 hours ago + + Definitely a word there, fixed! * nauip Photo nauip - 4 hours ago + + Wow - it's already fixed! * AutomaticJack Photo AutomaticJack - 2 hours ago + + "reported by an anonymous security researcher" - maybe another 0day needed burning in order to prevent it from falling into the wrong hands? #cyberwar Post a Comment Community Rules You need to login in order to post a comment [Login] Not a member yet? Register Now You may also like: [INS::INS] [mwise-join-forces] Popular Stories * Big Head Hacker New 'Big Head' ransomware displays fake Windows update alert * Iranian hacker Charming Kitten hackers use new 'NokNok' malware for macOS Latest Downloads * Malwarebytes Anti-Malware Logo Malwarebytes Anti-Malware Version: 4.5.32.271 5M+ Downloads * McAfee Consumer Products Removal tool Logo McAfee Consumer Products Removal tool Version: NA 434,240 Downloads * AdwCleaner Logo AdwCleaner Version: 8.4.0.0 56M+ Downloads * Windows Repair (All In One) Logo Windows Repair (All In One) Version: 4.13.1 2M+ Downloads * Everything Desktop Search Logo Everything Desktop Search Version: 1.4.1.1017 23,268 Downloads Follow us: * * * * * Main Sections * News * VPN Buyer Guides * Downloads * Virus Removal Guides * Tutorials * Startup Database * Uninstall Database * Glossary Community * Forums * Forum Rules * Chat Useful Resources * Welcome Guide * Sitemap Company * About BleepingComputer * Contact Us * Send us a Tip! * Advertising * Write for BleepingComputer * Social & Feeds * Changelog Terms of Use - Privacy Policy - Ethics Statement - Affiliate Disclosure Copyright @ 2003 - 2023 Bleeping Computer^(r) LLC - All Rights Reserved Login Username [ ] Password [ ] [*] Remember Me [ ] Sign in anonymously [Login] Sign in with Twitter button Sign in with Twitter --------------------------------------------------------------------- Not a member yet? Register Now Reporter Help us understand the problem. What is going on with this comment? * ( )Spam * ( )Abusive or Harmful * ( )Inappropriate content * ( )Strong language * ( )Other [ ] * [ ] Read our posting guidelinese to learn what content is prohibited. Submitting... SUBMIT