iPhone and iPad users are urged to update to iOS 16.5 now as three actively exploited zero-days potentially affecting billions of users have been confirmed by Apple
CVE-2023-32409 which could enable a remote attacker to break out of the Web Content security sandbox.CVE-2023-32373, which could lead to arbitrary code execution using maliciously crafted web content.iOS 16.5 presents as"another mixed bag of vulnerabilities, some with quite severe impacts if an attacker were able to successfully exploit them," according to the principal application security engineer at Featurespace, Sean Wright.
However, Wright agrees that the more worrying vulnerabilities are these WebKit vulnerabilities, believed to be being actively exploited in the wild."These would be the ones that I would be concerned about," Wright says,"I would highly recommend that people update when they can, but equally there’s no reason to panic about these vulnerabilities either. They will likely be targeted vulnerabilities, targeting high profile users such as media, politicians, etc.
05/21 Update: Although the 16.5 iOS update is fresh out of the starting blocks, and it’s an essential one for early installation because of the three ‘in-the-wild’ zero-days among the 39 security vulnerabilities addressed, it’s not the only iOS update in town. Apple has alsoAlthough not much detail was available immediately, details have inevitably started to leak out. And it’s good news from the security and privacy perspectives.
However, while the function, aimed at those who, as Apple describes it face “extraordinary digital threats” is certainly to be applauded, that applause will likely have to wait a while yet. As Apple Insider reports, “the setting exists in the beta, reports MacRumors, it doesn't appear that the setting has been enabled in iOS itself.
Canada Latest News, Canada Headlines
Similar News:You can also read news stories similar to this one that we have collected from other news sources.
Was an Arrest Warrant Issued for Bill Gates in the Philippines?🚨 There were no Philippines-based articles supporting the claim that the country had any intent to arrest Bill Gates, and the sole source of this rumor stemmed from a website that frequently makes false claims about Gates.
Read more »
Texas TikTok ban remains limited to government-issued devicesA TikTok ban in Texas remains limited to government-issued devices.
Read more »
Recall of 456K waffle makers issued after more than 30 burn injuries reportedThe risk of consumers sustaining burns has prompted a recall of 456,000 waffle makers by Wisconsin-based Empower Brands, according to a Thursday notice on the Consumer Product Safety Commission website.
Read more »
Precautionary shelter-in-place issued after chemical fire in Bellaire area, officials sayPublic health officials advise residents near Royalton Street to close their doors and windows and to turn off the A/C to limit exposure after a chemical fire ignited overnight.
Read more »