Macworld On Thursday, Apple released a slew of updates that bring a few new features to the iPhone and Mac. But much more importantly, the updates include three critical zero-day patches for security vulnerabilities that are known to have been actively exploited. The WebKit flaws span Apple’s family of devices and have been patched in iOS 16.5, iPadOS 16.5, watchOS 9.5, macOS 13.4, and tcOS 16.5, but also iOS/iPadOS 15.7.6, macOS Monterey 12.6.6, and macOS Big Sur 11.7.7, as well as Safari 16.5. All of the updates include the same five WebKit fixes, with three of them known to have been exploited: WebKit Impact: Processing web content may disclose sensitive informationDescription: An out-of-bounds read was addressed with improved input validation.WebKit…

Apple today posted a new support document outlining the security content of AirPods and Beats firmware updates, disclosing that the 5B66 firmware released yesterday for Beats Fit Pro and Powerbeats Pro addresses a vulnerability that could allow an attacker to gain access to your headphones. Available for: Powerbeats Pro, Beats Fit Pro Impact: When your headphones are seeking a connection request to one of your previously paired devices, an attacker in Bluetooth range might be able to spoof the intended source device and gain access to your headphones. Description: An authentication issue was addressed with improved state management. CVE-2023-27964: Yun-hao Chung and Archie Pusaka of Google ChromeOSThe issue also affected all AirPods, AirPods Pro, and AirPods Max models with the…