Friday , November 22 2024

Apple Issues Urgent Patches for Zero-Day Flaws Affecting iOS, macOS, and Safari

Apple has recently rolled out a new series of security patches to swiftly combat three zero-day vulnerabilities that are currently being actively exploited. These vulnerabilities affect iOS, iPadOS, macOS, watchOS, and Safari. This development brings the total count of zero-day bugs discovered in Apple’s software this year up to an alarming 16.

The list of security vulnerabilities is as follows :

“Forces Penpals” exposed US and UK Military Social Network’s 1 Million Records

Renowned cybersecurity researcher Jeremiah Fowler uncovered a non-password-protected database having over 1.1 million records linked to Conduitor Limited (Forces Penpals)....
Read More
“Forces Penpals” exposed US and UK Military Social Network’s 1 Million Records

CVE-2024-51503
Trend Micro released updates for Deep Security Agent RCE

Trend Micro released a security update for Deep Security 20 Agent Manual Scan Command Injection RCE Vulnerability (CVE-2024-51503) that resolves...
Read More
CVE-2024-51503  Trend Micro released updates for Deep Security Agent RCE

Apple Releases Patch for two Actively Exploited Zero-Day

Apple released critical updates for its various products including for iOS, iPadOS, macOS, visionOS, and Safari to fix two zero-day...
Read More
Apple Releases Patch for two Actively Exploited Zero-Day

Maxar Space Data Leak, Company admit, Investigation ongoing!

Maxar Space Systems has verified a major data breach that exposed particular information of current and former workers. The breach...
Read More
Maxar Space Data Leak, Company admit, Investigation ongoing!

GitHub CLI Vulnerability Could Allow RCE

A security vulnerability (CVE-2024-52308) in the GitHub Command Line Interface (CLI) could allow remote code execution on users' devices. With...
Read More
GitHub CLI Vulnerability Could Allow RCE

“Sarcoma” ransomware group
Hacker to disclose “Popular Life Insurance” 36 GB of stolen data

“Sarcoma” ransomware group attacked a well known Bangladeshi insurance company named "Popular life insurance company ltd". The threat actor keeps...
Read More
“Sarcoma” ransomware group  Hacker to disclose “Popular Life Insurance” 36 GB of stolen data

BugHunt 2024: A Milestone Cyber security Competition held at Dhaka

Bug Hunt 2024, one of the largest cyber security competitions and conferences in Bangladesh, was successfully held at the ICT...
Read More
BugHunt 2024: A Milestone Cyber security Competition held at Dhaka

TP-Link DHCP Vulnerability Allow Attackers Takeover Routers Remotely

A serious security flaw has been found in some TP-Link routers, potentially enabling hackers to remotely access the affected devices.The...
Read More
TP-Link DHCP Vulnerability Allow Attackers Takeover Routers Remotely

WSJ reports
T-Mobile hacked in massive breach of telecom networks

The Wall Street Journal reported on Friday citing people familiar with the matter that T-Mobile’s network was among the systems...
Read More
WSJ reports  T-Mobile hacked in massive breach of telecom networks

Palo Alto Networks Confirms critical RCE zero-day actively exploited

"Palo Alto Networks has observed threat activity exploiting an unauthenticated remote command execution vulnerability against a limited number of firewall...
Read More
Palo Alto Networks Confirms critical RCE zero-day actively exploited

There is a critical vulnerability with the identifier CVE-2023-41991 that affects the Security framework. This vulnerability could potentially be exploited by a malicious application to circumvent signature validation and compromise the security of the system. It is of utmost importance to address this issue as soon as possible to safeguard against potential attacks and ensure the integrity of the system.

There is a critical vulnerability in the Kernel, identified as CVE-2023-41992, which enables local attackers to exploit it in order to gain higher privileges.

There is a critical vulnerability in WebKit, known as CVE-2023-41993. This flaw has the potential to allow execution of arbitrary code if a specially crafted web content is processed.

ALSO READ:

Sophos customer met up at Dhaka; Ensuring existing investment

The latest updates are now available for the following devices and operating systems:

iOS 16.7 and iPadOS 16.7 – The iPhone 8 and newer models, as well as all iPad Pro models, the 3rd generation and newer iPad Air, the 5th generation and newer iPad, and the 5th generation and newer iPad mini are all compatible.

iOS 17.0.1 and iPadOS 17.0.1 – iPhone XS and newer models, iPad Pro 12.9-inch 2nd generation and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and newer models, iPad Air 3rd generation and newer models, iPad 6th generation and newer models, iPad mini 5th generation and newer models.

macOS Monterey 12.7 and macOS Ventura 13.6

watchOS 9.6.3 and watchOS 10.0.1 – The Apple Watch Series 4 and newer models support Safari 16.6.1 on macOS Big Sur and macOS Monterey.

Apple security releases click

 

 

Check Also

Tower

CISA, FBI Warns
Hacker compromised multiple teleco network at US

US authorities have revealed a major cyberespionage campaign by hackers, targeting information from Americans in …

Leave a Reply

Your email address will not be published. Required fields are marked *