It's Hot Zero-Day Summer for Apple, Google, and Microsoft Security Fixes
1 year, 5 months ago

It's Hot Zero-Day Summer for Apple, Google, and Microsoft Security Fixes

Wired  

The summer patch cycle shows no signs of slowing down, with tech giants Apple, Google, and Microsoft releasing multiple updates to fix flaws being used in real-life attacks. On July 10, Apple released iOS 16.5.1 9 to fix a single WebKit flaw already being used in attacks, but the iPhone maker quickly retracted it after discovering that the patch broke several websites for users. Later in the month, Apple’s major point upgrade iOS 16.6 appeared with 25 security fixes, including the already exploited WebKit bug patched in iOS 16.5.1, tracked as CVE-2023-37450. Apple also released iOS 15.7.8 for users of older devices, as well as iPadOS 16.6, Safari 16.6, macOS Ventura 13.5, macOS Monterey 12.6.8, macOS Big Sur 11.7.9, tvOS 16.6, and watchOS 9.6.

Security Apple Microsoft Update Ios Patch Cve Webkit  microsoft  apple  fixes  update  google  hot  ios  attacks  zeroday  166  webkit  security  summer  used  windows  patch

History of this topic

Apple asks users to update software as soon as possible to fix security issues
1 month, 2 weeks ago

Apple asks users to update software as soon as possible to fix security issues

The Independent  

Sign up to our free weekly IndyTech newsletter delivered straight to your inbox Sign up to our free IndyTech newsletter Sign up to our free IndyTech newsletter SIGN UP I would like to be emailed about offers, events and updates from The Independent. Read our privacy policy Apple has released a new software update with “important security fixes” for iPhones, …

Apple, Microsoft, and Google Just Fixed Multiple Zero-Day Flaws
1 year, 3 months ago

Apple, Microsoft, and Google Just Fixed Multiple Zero-Day Flaws

Wired  

Fall is here, but hot zero-day summer shows no signs of cooling down, with the likes of Apple, Microsoft, and Google fixing flaws being used in real-life attacks. First came iOS 16.6.1, an emergency security update released on September 9 to fix two flaws already being used in so-called “zero-click” attacks. The surprise iOS 17.0.1 upgrade was important because it …

Patched bugs in Apple and Google software exploited in spyware attacks: Report
1 year, 3 months ago

Patched bugs in Apple and Google software exploited in spyware attacks: Report

The Hindu  

Security bugs in Apple’s iOS and Google’s Chrome were found to have been exploited by threat actors to infect devices with Cytrox’s Predator spyware. The bugs, that were recently patched, were abused as part of an exploit chain to install the spyware, Citizen Lab and Google’s Threat Analysis Group shared in a blog post. Some of the domains used to …

Apple rolls out its first minor bug fix patch it announced in WWDC 2022
1 year, 8 months ago

Apple rolls out its first minor bug fix patch it announced in WWDC 2022

The Hindu  

Apple released its first “Rapid Security Response” to the public for iPhones, iPads, and Macs. The patch delivers important security improvements between software updates and is focused on bringing improvements for the Safari web browser, the WebKit framework stack, and other critical system libraries. Rapid Security Responses are essentially minor software patches between major updates, that ensure Apple can push …

Apple Users Need to Update iOS Now to Patch Serious Flaws
1 year, 10 months ago

Apple Users Need to Update iOS Now to Patch Serious Flaws

Wired  

February has been a big month for security updates, with the likes of Apple, Microsoft, and Google releasing patches to fix serious vulnerabilities. Apple iOS and iPadOS 16.3.1 Just weeks after the release of iOS 16.3, Apple issued iOS and iPadOS 16.3.1—an emergency patch to fix vulnerabilities that included a flaw in the browser engine WebKit that was already being …

Bug fixes this week | Vulnerabilities in Apple, Microsoft, Google, and Adobe products fixed
1 year, 10 months ago

Bug fixes this week | Vulnerabilities in Apple, Microsoft, Google, and Adobe products fixed

The Hindu  

During the week, the Indian Computer Emergency Response Team, released reports for security bugs affecting software including Apple’s iOS, iPadOS, and macOS, Microsoft’s Edge browser, Google Chrome, and Adobe products. Security bugs could be exploited by attackers to gain elevated privileges, execute arbitrary code, and gain access to sensitive information on targeted systems. Google Chrome Multiple security bugs were reported …

Apple releases updates fixing security bug exploited to hack iPhones and Macs: Report
1 year, 10 months ago

Apple releases updates fixing security bug exploited to hack iPhones and Macs: Report

The Hindu  

Apple, on Monday, released emergency security updates to address a new zero-day vulnerability used in attacks targeting iPhones, iPads, and Macs, a report from Bleepingcomputer shared. The security bug was found to be caused by a WebKit confusion that could be exploited to cause the operating system to crash and execute maliciously crafted codes on the affected devices. In Mac, …

Apple's new iPhone and iPad updates fix critical security flaw, users must update immediately
2 years, 2 months ago

Apple's new iPhone and iPad updates fix critical security flaw, users must update immediately

India Today  

Apple recently started rolling out new software updates for iPhones and iPads. The software versions, iOS 16.1 and iPadOS 16, introduced some new features, but Apple has now clarified the updates also address a critical security flaw. A spreadsheet by a Google researcher points out that CVE-2022-42827 is the seventh zero-day vulnerability Apple patched this year. Apple's Support page also …

Over 60 vulnerabilities detected in popular Microsoft products like Windows, Office among others
2 years, 3 months ago

Over 60 vulnerabilities detected in popular Microsoft products like Windows, Office among others

The Hindu  

CERT-In detected vulnerabilities in some of the most popular products of Microsoft including Windows, Office that could be exploited by hackers to steal sensitive information. The note stated that attackers could exploit these vulnerabilities to escalate privileges, execute arbitrary code, disclose sensitive information, bypass security restrictions and perform denial of services on targeted systems. In its blog on Wednesday, Cybersecurity …

Update your iPhone! Why Union minister is warning Apple devices are at risk
2 years, 4 months ago

Update your iPhone! Why Union minister is warning Apple devices are at risk

Firstpost  

Several devices including the iPhone6S and later models, Ipads 5th generation and newer, all iPad Pros, the iPad Air 2 and Mac computers running macOS Monterey are vulnerable. Update ur iphones wth 15.6.1 to avoid zero-day exploit vulnerabilitiea ⁦@IndianCERT⁩ ⁦@GoI_MeitY⁩ Apple releases iOS, iPadOS and macOS security fixes for two zero-days under active attack https://t.co/uKQbd0oDG1 — Rajeev Chandrasekhar 🇮🇳 August …

Microsoft's February Patch Tuesday Update Fixes Windows Zero-Day Vulnerability, 56 Other Critical Bugs
3 years, 10 months ago

Microsoft's February Patch Tuesday Update Fixes Windows Zero-Day Vulnerability, 56 Other Critical Bugs

News 18  

Microsoft has released its monthly batch of security-update that addresses 56 security vulnerabilities, including a Windows bug that was out in the wild, without any detection. The zero-day exploit tracked as CVE-2021-1732 is said to be a ‘Windows Win32k Elevation of Privilege Vulnerability,’ meaning it allows an attacker or malicious programme to elevate their privileges to administrative privileges. The new …

Google discloses new zero-day vulnerability in Windows OS
4 years, 2 months ago

Google discloses new zero-day vulnerability in Windows OS

The Hindu  

Google has revealed a zero-day vulnerability in the Windows operating system that lets hackers to exploit it actively. Zero-day vulnerability, a software security flaw that is known to the software vendor but doesn’t have a patch in place to fix the flaw, was discovered by Google’s Project Zero security researchers. According to Google, the zero-day bug in the Windows Kernel …

Microsoft fixes 113 vulnerabilities across 11 products including zero-day bugs
4 years, 8 months ago

Microsoft fixes 113 vulnerabilities across 11 products including zero-day bugs

Firstpost  

Owing to the absence of more details, it is not known if the three zero-day bugs have been exploited by the same attackers. Microsoft has recently published its monthly security for 113 vulnerabilities across 11 products, including three zero-day bugs. CVE-2020-1020 is one of the three zero-day vulnerabilities in the Windows Adobe Type Manager Library, which allows attackers to run …

Microsoft patches 113 exploits, 4 Windows active bugs
4 years, 8 months ago

Microsoft patches 113 exploits, 4 Windows active bugs

The Hindu  

Microsoft has patched 113 bugs, including four actively exploited vulnerabilities, that allow attackers to remotely execute malicious code on devices that run Windows. On supported operating systems other than Windows 10, attackers who successfully exploit the vulnerabilities can remotely execute code. “Microsoft assessed the severity of the vulnerability as critical in all supported versions of Windows except for Windows 10, …

Discover Related