{"uuid": "12f1002c-6a41-458c-8090-71a5d860bf8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-37450", "type": "seen", "source": "https://t.me/hacking_Attack/109549", "content": "Black Hat Ethical Hacking\nApple Releases Urgent Security Updates to Address Zero-Day Exploits Impacting iPhones, Macs, and iPads\n\nApple Releases Urgent Security Updates to Address Zero-Day Exploits Impacting iPhones, Macs, and iPadsPost Views: 1 Premium Contenthttps://www.blackhatethicalhacking.com/wp-content/uploads/2022/12/Patreon.png Subscribe to Patreon to watch this episode.\nReading Time: 3 Minutes\nApple has rolled out a series of Rapid Security Response (RSR) updates to address a newly discovered zero-day vulnerability that has been exploited in attacks targeting fully-patched iPhones, Macs, and iPads.\n\nIn iOS and macOS advisories, Apple acknowledges that the issue may have been actively exploited, urging all users to install the RSR patches as they contain critical security fixes. These RSR updates serve as compact security updates designed to address emerging security concerns on Apple devices, bridging the gap between major software updates.\n\nList of emergency patches includes:\n\n* macOS Ventura 13.4.1 (a)\n* iOS 16.5.1 (a)\n* iPadOS 16.5.1 (a)\n* Safari 16.5.2\n\nThe vulnerability, identified as CVE-2023-37450, resides in Apple\u2019s WebKit browser engine and allows attackers to execute arbitrary code on targeted devices by enticing victims to open web pages containing maliciously crafted content. Apple has implemented improved checks in the RSR updates to mitigate the risk of exploitation.\n\nhttps://www.bleepstatic.com/images/news/u/1109292/2023/Apple%20macOS%2013_4_1%20(a)%20RSR.png macOS 13.4.1 (a) RSR patch (BleepingComputer)\nSee Also: So you want to be a hacker? Offensive Security, Bug Bounty Courses 10 Zero-days in 2023It is worth noting that this marks the tenth zero-day vulnerability that Apple has addressed in 2023 alone, underscoring the persistent efforts of threat actors to exploit Apple devices. Earlier this month, Apple addressed three zero-day vulnerabilities exploited via iMessage zero-click attacks to deploy Triangulation spyware on iPhones.\n\nIn May, the company fixed three more zero-days, likely used to install mercenary spyware. Additionally, Apple patched two zero-days in April, which were part of exploit chains targeting high-risk targets, and addressed a WebKit zero-day in February.\nTrending: The Rise and Fall of Sabu: From Hacker Hero to FBI Informant Trending: Recon Tool: Logsensor These ongoing security updates demonstrate Apple\u2019s commitment to swiftly respond to emerging threats and safeguard the security and privacy of its users. Users are strongly encouraged to enable automatic updates or install Rapid Security Response patches promptly to ensure their devices remain protected against the latest vulnerabilities.\nTrending: DDoSia Attack Tool Upgraded with Encryption, Concealed Targeting\nAre u a security researcher? Or a company that writes articles or write ups about Cyber Security, Offensive Security (related to information security in general) that match with our specific audience and is worth sharing?\n\nIf you want to express your idea in an article contact us here for a quote: info@blackhatethicalhacking.com\nSource: bleepingcomputer.com Source Link https://www.blackhatethicalhacking.com/wp-content/uploads/2023/03/Store.png Recent News* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-3-300x150.png Charming Kitten APT Group Unleashes New NokNok Malware, Targeting macOS SystemsJuly 10, 2023\n* https://www.blackhatethicalhacking.com/wp-content/uploads/2023/07/Images-for-the-News-posts-2-300x150.png Cisco Warns of High-Severity Vulnerability in Data Center Switches Allowing Tampering with Encrypted TrafficJuly 7, 2023\n* https://www.bla[...]", "creation_timestamp": "2026-09-01T20:00:54.442795Z"}