Apple Just Patched Two Actively Exploited iOS Zero-Days — Here’s What You Need to Know
(image created with DALL·E) Apple has released emergency security updates to patch two critical zero-day vulnerabilities in iOS that were being actively exploited in the wild —and the targets weren't random. These flaws were reportedly used in targeted attacks against individuals, raising serious concerns about user privacy and device security. Let’s break down what’s happening. What are zero-days? A zero-day vulnerability is a software flaw unknown to the vendor—in this case, Apple—that hackers can exploit before a fix is available. Because there’s “zero” time between discovery and exploitation, these vulnerabilities are extremely dangerous. The flaws Apple patched Apple addressed two major security bugs in iOS and iPadOS: IOSurfaceAccelerator flaw (CVE-2024-23225) – This could allow malicious apps to execute code with kernel privileges, which essentially means full access to the operating system. RTKit flaw (CVE-2024-23296) – This vulnerability also let attackers b...