Apple, Microsoft, and Google Just Fixed Multiple Zero-Day Flaws

Fall is here, but hot zero-day summer shows no signs of cooling down, with the likes of Apple, Microsoft, and Google fixing flaws being used in real-life attacks. First came iOS 16.6.1, an emergency security update released on September 9 to fix two flaws already being used in so-called “zero-click” attacks. The surprise iOS 17.0.1 upgrade was important because it fixed another three iPhone flaws being used in spyware attacks. The flaws patched in iOS 17.0.1 were also fixed in the iOS 16.7 release for users of older iPhones or people who don’t want to upgrade to the latest software. Google Android September was a big security month for Google’s Android users, with the monthly patch fixing 33 flaws, including one already being used in attacks.