On August 23, Apple clarified on its website that their threat notifications were designed to inform and assist users who might be targeted by state-sponsored attackers.
After a lot of outrage, the tech giant Apple has clarified that it “does not attribute the threat notifications to any specific state sponsored attacker…detecting such attacks relies on threat intelligence signals that are often imperfect and incomplete.”
The second zero-day vulnerability is a WebKit that allows data corruption or arbitrary code execution when freed memory is reused. An attacker can exploit this flaw by tricking targets into loading malicious web pages under their control, resulting in code execution on compromised systems. 📲 iOS Security Breach: Apple Fixes Two Zero-Day Bugs Exploited To Hack iPhones, Macs and iPads.
Apple is warning of a flaw that is allowing hackers to seize control of iPhones, iPads and Mac computers, and is urging users to install emergency software updates.