Patched – Latest Apple News

Apple patched actively exploited iMessage bug in latest updates

tigaman webdesign — Thu, 22 Jun 2023 00:24:33 +0000

Don’t hold off too long on updating to iOS 16.5.1 and the other new public releases, as Apple has patched multiple security issues that were actively exploited.

iMessage vulnerability patched

Apple released iOS 16.5.1, iPadOS 16.5.1, macOS Ventura 13.4.1, and watchOS 9.5.2 on Wednesday. These are small point updates but contain critical security patches.

Apple patched actively exploited iMessage bug in latest updates

tigaman webdesign — Thu, 22 Jun 2023 00:24:33 +0000

Don’t hold off too long on updating to iOS 16.5.1 and the other new public releases, as Apple has patched multiple security issues that were actively exploited.

iMessage vulnerability patched

Apple released iOS 16.5.1, iPadOS 16.5.1, macOS Ventura 13.4.1, and watchOS 9.5.2 on Wednesday. These are small point updates but contain critical security patches.

How to start a smart home using Apple Home

tigaman webdesign — Wed, 14 Jun 2023 12:45:00 +0000

Illustration by Samar Haddad for The Verge

My smart home journey began, like so many others, with a poorly placed light switch. My partner and I had just bought our first house, and the switch that illuminated the kitchen was in the laundry room all the way on the other side, meaning we had to wander through darkness to get to it. I hated that light switch.

So what to do? Well, I could spend a bunch of money I didn’t have to hire someone to move it, try to do it myself and accidentally burn my house down with a bad wiring job, or take the plunge on a smart home. I took the path of least resistance (that’s an electricity joke) and got started on smartening up my house.

I started out with an Amazon Echo Dot and quickly found that I hated the skills system Amazon uses; plus, the sound quality of its little black puck was terrible. So I got a Google Home Mini. It looked nicer but had invisible touch controls, and the app felt half-finished. I could’ve stopped there, but driven by the sunk cost fallacy, I gave Apple Home a shot.

After you start your Apple-centric smart home, the HomePod Mini can add more convenient voice controls.

Apple Home, formerly known as HomeKit (which still refers to its smart home APIs), is Apple’s nine-year-old smart home platform, started in 2014 as a Siri-driven experience. Amazingly, it had no app until two years later and no smart speaker until the company finally released the first HomePod in 2018. The Verge’s Nilay Patel loved the HomePod’s audio chops but said it suffered in many other ways, not least of which is its place in Apple’s infamous walled garden, making it a “lonely” device. It couldn’t distinguish between voices, couldn’t operate your TV, and could only handle one timer at a time. But I just wanted my lights to turn on and off, and for me, it seemed to do that better than the others, so I stuck with it. Apple has closed the gap since then in all of the big, meaningful ways, but it’s been a slow process.

Today, Apple Home’s advantages are mostly two-fold. First, there’s Apple’s easy-to-use, attractive Home app. I found Apple Home to be a breath of fresh air after using Amazon’s Alexa smart home app, which perplexingly hides most of its actual smart home controls in a tab.

Second is being so locked into the company’s ecosystem that you benefit from its strict requirements for Apple Home-compatible devices. Those requirements include the ability to control devices locally — which means you still get basic control from your phone if your internet service goes out — and features like HomeKit Secure Video (HKSV), which gives users encrypted cloud video storage and facial recognition based on users’ Apple Photos library, among other things (more on this later). Admittedly, though, this is a double-edged sword since compliance with Apple strictures has resulted in a more limited, spendy product choice.

Apple’s system has, among the big smart home platforms, also seen perhaps the most enthusiastic support for the new Matter protocol, which is partially based on Apple’s platform and still in its early days. If you’ve invested in almost any recent Apple Home Hub — that is, an Apple TV or a HomePod — you’ll find that device is also a Thread border router. That’s important because Thread is the wireless standard to be used in many inexpensive smart home devices going forward. For more, our own Jennifer Tuohy has a great introductory guide on the subject.

Starting your smart home

If you’re going to go with Apple Home, you may want to start with an Apple Home Hub — as mentioned above, either an Apple TV (ideally from 2021 or newer) or a HomePod. If you’re planning to purchase a HomePod, be aware that If you get the newest version, you’re essentially only paying for better sound (which, again, is stellar) because the $99 HomePod Mini, at only a third of the price, brings all of the same functionality. The 2022 Apple TV 4K, starting at $129, is a powerful TV streaming box and probably the best such product for most people to buy anyway, though you won’t get Thread support, as it’s reserved for the 128GB version.

Whichever you choose, buying an Apple Home Hub enables you to control your smart home when you’re away and lets you share access with others, provided they have an iPhone. Without a Home Hub, things get less convenient, but you can still add and control smart home products with your Apple devices.

Smart light bulbs are a great way to add to expand your repertoire.

As for smart devices, start small. Smart light bulbs are a great jumping-off point, and I’ve generally had the best experience with Philips Hue, though setup is a little more involved for Hue bulbs than for, say, Nanoleaf’s Essentials A19. Both brands offer bulbs compatible with Apple’s Adaptive Lighting feature, which gradually tunes the warmth of the bulb throughout your day to be cooler or warmer, depending on the time.

For smart plugs, I’ve tried a few, and all have been iffy at one time or another. The best, though, have been my Eve Energy smart plugs. Eve’s plugs are not cheap but feel worth it, as they offer a built-in power meter function that tracks how much power is flowing through them, even offering an estimate of what that’ll cost you based on the last week, day, or minute of usage. The Eve app also succeeds where Apple’s Home app fails by showing how your Thread network is structured, which helped immensely when I had to troubleshoot responsiveness issues with my Thread devices a few weeks ago.

Smart home security cameras can be a good go-to next, though picking the right one is tricky. Go for one that supports HKSV if you have an iCloud Plus subscription, as that gets you 10 days of video history, the ability to set detection zones, and object recognition for people, animals, vehicles, and even packages. In addition to being able to view camera notifications on your iPhone, iPad, and Mac, an Apple TV can show picture-in-picture streams from your cameras, which comes in handy when I’m watching TV in my basement and can’t hear knocks on my front door (of course, notifications can be turned off as well).

I use a pair of EufyCam 2C cameras, though there are reasons to be cautious about Eufy’s security practices. Otherwise, Netatmo and Logitech both make well-liked alternatives, as do Eve and Aqara. Be careful not to confuse Apple Home compatibility with HKSV support, though. Arlo makes fantastic cameras, for instance, but their support is limited to live video streaming and basic motion detection in the Apple Home app.

Motion sensors like this Aqara motion sensor P1 can offer peace of mind.

If you want to add peace of mind beyond what cameras offer, you can look for door and window sensors like those for Ecobee thermostats. The Aqara water leak detector actually saved my bacon once when a leak I’d patched in my basement sprung open in the middle of the night — my iPhone alerted me to it, waking me up so I could stop the leak before it got to anything important. Door / window and motion sensors can also be great for setting up automation, so your lights are on right after you walk in the room.

Finally, with enough HomePods (Mini and above) in your home, you actually may not need separate humidity or temperature sensors, as those are built in, though in my experience, they’re not as accurate as dedicated sensors. In addition, their built-in alarm recognition means you can be notified if your smoke detector goes off when you’re out of the house. Those features aren’t unique to HomePods, but having all of them in one device is. Some Amazon Echo speakers have temperature sensors and can detect sounds like smoke alarms but lack humidity sensors, while Google’s Nest speakers can detect alarms, but only if you pay for its Nest Aware subscription, and lack built-in temperature and humidity sensors.

Ecobee thermostats can work with door and window sensors.

I set up my own Apple Home system by slowly identifying pain points in my house that I thought a smart device would make better. I now have a mix of smart lights and smart dimmers; various environmental, motion, and leak sensors; outdoor smart security cameras; a smart garage door opener module (that is, shockingly, compatible with my ancient Automatic Doorman opener); and more. I don’t even know how many devices I own at this point because many of them are Zigbee devices that rely on various hubs, like my Aqara and Hue hubs, to connect to Apple Home.

I collect information like I once did Pogs, and I love being able to find out the conditions in every part of my house — and being able to check on things there when I’m away. Various sensors have also allowed me to adjust my dampers for the best air distribution and helped me know where to place humidifiers and dehumidifiers for the best result.

Making it better

As I said earlier, Apple’s onerous certification program has resulted in a more limited selection and higher prices, which can be a big pain in the butt when you’re looking for smart home devices. But as Matter is rolled out more, we should see a lot of those limitations fall away as basic smart devices like light bulbs, switches, plugs, and sensors become more commoditized. It also means no more looking for HomeKit certification for device makers, as Matter is intrinsically cross-platform.

But there are other things Apple could do better. Improvements to Siri are always welcome, as right now, it often refers me to my phone for certain queries, such as web searches or business information (though other times it gives me the answers I’m seeking through the speaker), and my phone never seems to be aware it’s supposed to be showing me something. It would also be great to see more third-party support for Apple’s assistant — two years after opening Siri to other developers for use, Ecobee is still the only company actually taking Apple up on the offer.

There are ways to get around Apple’s lack of third-party support, such as Home Assistant, an open-source project that adds customizable HomeKit support to far more devices than do so natively. I’ve never tried this myself, partially because I haven’t had a need and partially because it’s time-consuming and I’ve just never gotten around to it.

I’d also love to see some fun or more granular automations injected into Apple Home. There are hacky ways to get this to happen, but they’re obscure and require more technical know-how than many people possess. For instance, I have a scene that flashes green and yellow lights on a pair of Nanoleafs and plays Todd Rundgren’s “Bang on the Drum All Day’’ whenever I yell “Go pack!” at Siri — but frankly, I won’t touch that scene ever again because I still have no idea how I got the lights to actually do what I wanted them to.

Should you use Apple Home?

If you want more choice and don’t want to wait for Matter to truly take over (assuming it really does), Google and Alexa are your options — that is, unless you’re willing to invest your time, energy, and brain power into Home Assistant integration, an open-source project that adds customizable HomeKit support to far more devices than do so natively.

But if you want to have a smart home and you’re concerned about privacy and security, then Apple has the best track record for those things. And as the Matter protocol matures, choice and affordability limits will fall away. If you’re already in the Apple ecosystem, it’s almost no contest, as the company’s famous interoperability extends to its smart home platform, making for a much more synchronous experience.

Photography by Wes Davis / The Verge

PSA: If You Run Windows, Make Sure to Update iTunes to Fix Security Vulnerability

tigaman webdesign — Thu, 01 Jun 2023 22:07:30 +0000

Windows users will want to make sure that they are running the latest version of iTunes, iTunes 12.12.9, in order to gain protection from a recently uncovered security vulnerability.

Apple released iTunes 12.12.9 on May 23, and it fixes an issue that could allow malicious apps to gain elevated privileges to install malware on a Windows machine. While the vulnerability was addressed last week, Synopsys, the security company that discovered the problem, today shared some details on how it worked.

iTunes had a privileged folder with weak access control, allowing a malicious person to redirect the folder creation to the Windows system directory, which could then be used to obtain a higher-privileged system shell.

The iTunes application creates a folder, SC Info, in the C:\ProgramData\Apple Computer\iTunes directory as a system user and gives full control over this directory to all users. After the installation, the first user to run the iTunes application can delete the SC Info folder, create a link to the Windows system folder, and re-create the folder by forcing an MSI repair, which can be later used to gain Windows SYSTEM level access.

All versions of iTunes prior to 12.12.9 are impacted by this vulnerability, and so iTunes users who are running older versions of the software should make sure to update.

Synopsys first discovered the problem in September 2022, and told Apple about it at that point. Apple confirmed the vulnerability in November, and then patched it in May. Apple did not say that this exploit was known to have been used in the wild so it is not as critical as some other vulnerabilities, but it is still a good idea to install the latest version of iTunes right away.

Tags: iTunes, Windows

Related Forum: Mac Apps

This article, "PSA: If You Run Windows, Make Sure to Update iTunes to Fix Security Vulnerability" first appeared on MacRumors.com

Discuss this article in our forums

Microsoft found a macOS exploit that could completely bypass System Integrity Protection

tigaman webdesign — Tue, 30 May 2023 20:25:41 +0000

Microsoft identified a new macOS vulnerability called “Migraine” that can cause headaches for Mac users — but only if you haven’t updated your software recently.

Apple patched macOS “Migraine” exploit

On May 30, Microsoft published a new threat intelligence paper detailing a macOS vulnerability they call “Migraine,” which they’ve already alerted Apple about. With this vulnerability, attackers with root access on a machine can “automatically bypass” System Integrity Protection (SIP) and perform arbitrary operations on that device.

Once again, you’ll have to wait till next year for the iPhone upgrade you really want

tigaman webdesign — Mon, 22 May 2023 17:33:04 +0000

Macworld

Welcome to our weekly Apple Breakfast column, which includes all the Apple news you missed last week in a handy bite-sized roundup. We call it Apple Breakfast because we think it goes great with a Monday morning cup of coffee or tea, but it’s cool if you want to give it a read during lunch or dinner hours too.

Jam tomorrow

One of our most widely read articles last week was an exploration of early iPhone 16 rumors. Reflecting on reports of larger screens, better battery life, solid-state buttons, and more, the article mused that the best course for customers might be to skip the iPhone 15 generation entirely and wait for the big update in 2024. I don’t entirely disagree… but this argument did make me wonder how often super-exciting Apple product launches are predicted for next year, and how often they actually arrive.

I’m not talking about delays. I don’t mean, for example, the endlessly pushed-back launch of the Reality Pro headset–because, unless it hits an insoluble technical difficulty and does an AirPower, that will arrive eventually. I’m talking about the way that next year’s launch is always more exciting than this year’s.

Lewis Carroll’s White Queen, one of the earliest exponents of the tick-tock release strategy, famously pledged to feed her employees jam every other day, with the slight caveat that in practice, jam would be served yesterday and tomorrow but never today. Today’s White Queens work as tech analysts, endlessly telling us that the iPhone upended the industry in the past and will enjoy groundbreaking innovations in the future but this year, sadly, is doomed to wallow in the iterative doldrums.

So let’s try an experiment. When, in your view, was the last really momentous iPhone launch? Especially generous readers might be thinking last year’s 14 Pro, which did offer an always-on display and the Dynamic Island. But plenty of pundits advised their readers to give it a miss and wait for the 15 series. Sound familiar?

I have a soft spot for the 12-series, with their sharp-edged redesign and MagSafe charging standard, while 5G support in retrospect feels like an important step forward; but in an iPhone 12 Pro review at the time I said that “Everything about this screams iterative upgrade.” Those with an iPhone 11, I insisted, had no reason to make an upgrade that year.

In fact, to find an iPhone launch that most people at the time agreed was a big deal, I reckon you have to go back to the iPhone X, the first of Apple’s handsets to ditch the home button and go almost full-screen. (Our own review even declared, “The thrill is back.”) But I bet there were pundits in 2017 insisting that the XS would be the one to wait for.

Partly, I suppose, this mentality is a function of the way that tech products are developed. Each generation of iPhone presumably starts out with grand ambitions, which are gradually worn down and compromised as tests fail and prototypes disappoint and managers do their best to keep costs under control. On the other hand, without wishing to be overly cynical, media coverage naturally gravitates towards the rumors that are most interesting, and the further we are from launch, the less concrete information there will be to keep the nonsense in check. Next year’s iPhone sounds more exciting than this one’s because the more wildly ambitious rumors about it have not yet been disproven.

There might also be a larger psychological effect going on here. Whatever we have right now has to be unsatisfactory for the entire system to work. We’ve based our economy around wistfulness for an imagined future, and our politics around nostalgia for a misremembered past. Why should the way we feel about tech products be any different?

Perhaps I’m starting to drift out of my lane. If this week’s column has been disappointing, I do apologize. But next week’s is going to be awesome.

Foundry

Apple’s upcoming AR headset is the riskiest product it’s ever launched.

The new Beats Studio Buds + make us long for the days of the iMac and iBook. Apple, please make transparent devices again.

If no one can afford Apple’s AR headset, does it matter how good it is?

Final Cut Pro changes everything and nothing about the iPad.

Google will pay an absurd amount for your iPhone if you switch to a Pixel Fold.

Want to know how long Macs last? Macworld investigates the lifespan of Macs and MacBooks.

A special tour of Apple Park is among the new perks offered at this year’s WWDC viewing event.

The rumor mill

Following a recent dip, Apple is looking to spur a ‘Mac comeback’ with a super-fast M3 chip.

Hype is building for Apple’s AR headset as more evidence of a WWDC launch emerges.

Indeed, Apple’s ‘xrOS’ trademark all but confirms the arrival of its AR headset next month.

If you want an iPhone 14 Pro you should probably just wait for the iPhone 15.

Podcast of the week

The countdown to Apple’s Developers Conference has begun, and reports say that it’s time for major changes with watchOS 10. We talk about the new face of the Apple Watch in this episode of the Macworld Podcast!

You can catch every episode of the Macworld Podcast on Spotify, Soundcloud, the Podcasts app, or our own site.

Software updates, bugs & problems

A weird iPhone bug has been breaking chat threads with Android users.

Apple has patched three active Safari zero-day bugs with its latest round of updates.

We now know what Apple fixed in its first iOS and macOS Rapid Security Response.

People were upset with Google last week, but Apple will delete your inactive account even faster.

Apple is tapping into Shazam with new live concert features in Music and Maps.

Apple has pushed an updated iOS 16.5 final beta as the wide release approaches, and a rare third macOS Ventura 13.4 release candidate.

And with that, we’re done for this week. If you’d like to get regular roundups, sign up for our newsletters. You can also follow us on Twitter or on Facebook for discussion of breaking Apple news stories. See you next week, and stay Appley.

Apple

The exciting iPhone update everyone wants will forever be a year away

tigaman webdesign — Mon, 22 May 2023 03:30:00 +0000

Macworld

Jam tomorrow

Perhaps I’m starting to drift out of my lane. If this week’s column has been disappointing, I do apologize. But next week’s is going to be awesome.

Foundry

Apple’s upcoming AR headset is the riskiest product it’s ever launched.

The new Beats Studio Buds + make us long for the days of the iMac and iBook. Apple, please make transparent devices again.

If no one can afford Apple’s AR headset, does it matter how good it is?

Final Cut Pro changes everything and nothing about the iPad.

Google will pay an absurd amount for your iPhone if you switch to a Pixel Fold.

Want to know how long Macs last? Macworld investigates the lifespan of Macs and MacBooks.

A special tour of Apple Park is among the new perks offered at this year’s WWDC viewing event.

The rumor mill

Following a recent dip, Apple is looking to spur a ‘Mac comeback’ with a super-fast M3 chip.

Hype is building for Apple’s AR headset as more evidence of a WWDC launch emerges.

Indeed, Apple’s ‘xrOS’ trademark all but confirms the arrival of its AR headset next month.

If you want an iPhone 14 Pro you should probably just wait for the iPhone 15.

Podcast of the week

You can catch every episode of the Macworld Podcast on Spotify, Soundcloud, the Podcasts app, or our own site.

Software updates, bugs & problems

A weird iPhone bug has been breaking chat threads with Android users.

Apple has patched three active Safari zero-day bugs with its latest round of updates.

We now know what Apple fixed in its first iOS and macOS Rapid Security Response.

People were upset with Google last week, but Apple will delete your inactive account even faster.

Apple is tapping into Shazam with new live concert features in Music and Maps.

Apple has pushed an updated iOS 16.5 final beta as the wide release approaches, and a rare third macOS Ventura 13.4 release candidate.

Apple

New iOS and macOS updates fix severe flaws in iPhones and Macs from the past 10 years

tigaman webdesign — Sun, 21 May 2023 16:06:02 +0000

Macworld

On Thursday, Apple released a slew of updates that bring a few new features to the iPhone and Mac. But much more importantly, the updates include three critical zero-day patches for security vulnerabilities that are known to have been actively exploited. The most alarming of the bugs allow a hacker to access personal data and take over your device via a malicious app.

The WebKit flaws span Apple’s family of devices and have been patched in iOS 16.5, iPadOS 16.5, watchOS 9.5, macOS 13.4, and tvOS 16.5, but also iOS/iPadOS 15.7.6, macOS Monterey 12.6.6, and macOS Big Sur 11.7.7, as well as Safari 16.5. All of the updates include the same five WebKit fixes, with three of them known to have been exploited:

WebKit

Impact: Processing web content may disclose sensitive information
Description: An out-of-bounds read was addressed with improved input validation.
WebKit Bugzilla: 255075
CVE-2023-32402: an anonymous researcher

WebKit

Impact: Processing web content may disclose sensitive information
Description: A buffer overflow issue was addressed with improved memory handling.
WebKit Bugzilla: 254781
CVE-2023-32423: Ignacio Sanmillan (@ulexec)

WebKit

Impact: A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited.
Description: The issue was addressed with improved bounds checks.
WebKit Bugzilla: 255350
CVE-2023-32409: Clément Lecigne of Google’s Threat Analysis Group and Donncha Ó Cearbhaill of Amnesty International’s Security Lab

WebKit

Impact: Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.
Description: An out-of-bounds read was addressed with improved input validation.
WebKit Bugzilla: 254930
CVE-2023-28204: an anonymous researcher

WebKit

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Description: A use-after-free issue was addressed with improved memory management.
WebKit Bugzilla: 254840
CVE-2023-32373: an anonymous researcher

Two of the three zero day flaws, CVE-2023-28204 and CVE-2023-32373, were previously patched as part of Apple’s first Rapid Security Response updates for iOS and iPadOS (16.4.1 (a)) and macOS Ventura (13.3.1 (a)).

To update your iPhone or iPad, go to the Settings app, then General and Software Update. On a Mac, go to System Settings, then General and Software Update; on pre-Ventura Macs, find the System Preferences app, then Software Update.

iOS, MacOS

Apple patches three exploited zero-day flaws in iOS, macOS for new and old devices

tigaman webdesign — Fri, 19 May 2023 15:02:44 +0000

Macworld

The WebKit flaws span Apple’s family of devices and have been patched in iOS 16.5, iPadOS 16.5, watchOS 9.5, macOS 13.4, and tcOS 16.5, but also iOS/iPadOS 15.7.6, macOS Monterey 12.6.6, and macOS Big Sur 11.7.7, as well as Safari 16.5. All of the updates include the same five WebKit fixes, with three of them known to have been exploited:

WebKit

Impact: Processing web content may disclose sensitive information
Description: An out-of-bounds read was addressed with improved input validation.
WebKit Bugzilla: 255075
CVE-2023-32402: an anonymous researcher

WebKit

Impact: Processing web content may disclose sensitive information
Description: A buffer overflow issue was addressed with improved memory handling.
WebKit Bugzilla: 254781
CVE-2023-32423: Ignacio Sanmillan (@ulexec)

WebKit

Impact: A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited.
Description: The issue was addressed with improved bounds checks.
WebKit Bugzilla: 255350
CVE-2023-32409: Clément Lecigne of Google’s Threat Analysis Group and Donncha Ó Cearbhaill of Amnesty International’s Security Lab

WebKit

Impact: Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.
Description: An out-of-bounds read was addressed with improved input validation.
WebKit Bugzilla: 254930
CVE-2023-28204: an anonymous researcher

WebKit

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Description: A use-after-free issue was addressed with improved memory management.
WebKit Bugzilla: 254840
CVE-2023-32373: an anonymous researcher

iOS, MacOS

Apple patches 3 exploited flaws in iPhones and Macs going back to 2013

tigaman webdesign — Fri, 19 May 2023 15:02:44 +0000

Macworld

WebKit

Impact: Processing web content may disclose sensitive information
Description: An out-of-bounds read was addressed with improved input validation.
WebKit Bugzilla: 255075
CVE-2023-32402: an anonymous researcher

WebKit

Impact: Processing web content may disclose sensitive information
Description: A buffer overflow issue was addressed with improved memory handling.
WebKit Bugzilla: 254781
CVE-2023-32423: Ignacio Sanmillan (@ulexec)

WebKit

Impact: A remote attacker may be able to break out of Web Content sandbox. Apple is aware of a report that this issue may have been actively exploited.
Description: The issue was addressed with improved bounds checks.
WebKit Bugzilla: 255350
CVE-2023-32409: Clément Lecigne of Google’s Threat Analysis Group and Donncha Ó Cearbhaill of Amnesty International’s Security Lab

WebKit

Impact: Processing web content may disclose sensitive information. Apple is aware of a report that this issue may have been actively exploited.
Description: An out-of-bounds read was addressed with improved input validation.
WebKit Bugzilla: 254930
CVE-2023-28204: an anonymous researcher

WebKit

Impact: Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.
Description: A use-after-free issue was addressed with improved memory management.
WebKit Bugzilla: 254840
CVE-2023-32373: an anonymous researcher

iOS, MacOS

Patched – Latest Apple News

Apple patched actively exploited iMessage bug in latest updates

Apple patched actively exploited iMessage bug in latest updates

How to start a smart home using Apple Home

Starting your smart home

Making it better

Should you use Apple Home?

PSA: If You Run Windows, Make Sure to Update iTunes to Fix Security Vulnerability

Microsoft found a macOS exploit that could completely bypass System Integrity Protection

Once again, you’ll have to wait till next year for the iPhone upgrade you really want

Jam tomorrow

Trending: Top stories

The rumor mill

Podcast of the week

Software updates, bugs & problems

The exciting iPhone update everyone wants will forever be a year away

Jam tomorrow

Trending: Top stories

The rumor mill

Podcast of the week

Software updates, bugs & problems

New iOS and macOS updates fix severe flaws in iPhones and Macs from the past 10 years

Apple patches three exploited zero-day flaws in iOS, macOS for new and old devices

Apple patches 3 exploited flaws in iPhones and Macs going back to 2013