Apple Addresses Third Zero-Day In 2022

Threat Watch

Threat Watch Apple Addresses Third Zero-Day In 2022

Apple Addresses Third Zero-Day In 2022

Apple has released a patch for a WebKit zero-day affecting iOS, iPadOS, macOS, and Safari that may have been actively exploited. The flaw is a use after free issue that could be triggered by processing maliciously crafted web content, leading to arbitrary code execution. This vulnerability was reported to Apple by an anonymous researcher and was addressed by the company by improving the memory agent. This is the third critical zero-day that has been addressed by the company this year, all being accompanied with a security patch.

ANALYST NOTES

Apple has released security updates for iPhone 6s and later, iPad Pro (all models), iPad Air 2 and later, iPad 5th generation and later, iPad mini 4 and later, and iPod touch (7th generation), macOS devices running Big Sur and macOS Catalina, and also as a standalone update for Safari. Users of Apple devices should ensure that their software is up to date to prevent threat actors from exploiting the vulnerability.

Apple addressed a third zero-day in 2022, which is actively exploited

Using Microsoft Sentinel to Detect Confluence CVE-2022-26134 Exploitation

Russia may be Pressing Arrested Cyber Criminals into Service

Get To Know Bob Meindl, Our New CEO!

How Ransomware Capabilities Are Evolving and What You Can Do to Keep Your Organization Secure

Threat Watch