Apple, two security holes discovered: software update launched

Apple has closed two vulnerabilities that may have already been exploited with a series of software updates for its devices. One of the vulnerabilities involved Apple’s WebKit software, which is used to display content in web browsers. Artfully crafted websites could use the flaw to execute arbitrary software code, Apple said. “Simply put, a cybercriminal could inject malware into a user’s device who only viewed an otherwise harmless web page,” cybersecurity firm Sophos warned Thursday. This vulnerability puts iPhones and iPads at even greater risk than Mac computers, as all browsers on mobile devices run WebKit, not just the company’s Safari application. The second vulnerability concerned the so-called kernel, the central part of the operating system. An attacker who has already gained access to the device could use it to access all kinds of data, Sophos pointed out.Such security gaps are considered very valuable and are usually exploited by secret services and surveillance software developers. Pegasus software from Israeli spy software company Nso, which also exploited the vulnerabilities of Apple devices, has become particularly well-known. Apple has referenced suggestions from an anonymous researcher for the security holes that have now been plugged. Like other companies, the iPhone company awards prizes for information on discovered vulnerabilities. In recent years, Apple has repeatedly announced security vulnerabilities when updates are released. With software updates, users have to act on their own to install them. Current versions of the operating system are iOS 15.6.1 for the iPhone and iPadOS 15.6.1 for tablets, as well as macOS Monterey 12.5.1 for Apple computers.