Apple Addresses Critical Zero-Day Vulnerabilities Affecting Intel-Based Macs
Apple has addressed two critical zero-day vulnerabilities that were actively exploited by attackers to target Intel-based Macs. The flaws resided in macOS Sequoia’s JavaScriptCore (CVE-2024-44308) and WebKit (CVE-2024-44309) components.
The more severe vulnerability, identified as CVE-2024-44308, could enable attackers to execute malicious code remotely via specially crafted web content. By contrast, the other flaw (CVE-2024-44309) could be leveraged for cross-site scripting (XSS) attacks.
These patches are included in macOS Sequoia 15.1.1, iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, and visionOS 2.1.1. Notably, this brings the total number of zero-day vulnerabilities that Apple has patched so far in 2024 to six.
It is crucial for users to update their devices to the latest software versions at the earliest convenience to safeguard themselves from these vulnerabilities. Here’s how to update your Apple device:
- For macOS devices, navigate to System Preferences > Software Update.
- On iPhones and iPads, go to Settings > General > Software Update.
By keeping your software up-to-date, you can ensure that your device is protected against the latest security threats.
Get In Touch
Share On Social Media
Other Recent Blog Articles
The Voice on the Phone Isn’t Who You Think It Is: AI Scams Are Coming for Portland Small Businesses
A few years ago, “phishing email” was the scariest phrase in small business IT. Bad spelling, a sketchy link, a fake invoice from “Microsoft Support.” Most of us got pretty…
Your Cybersecurity Is Only as Strong as Your Weakest Vendor
The Nintendo TinyPulse Breach Is a Wake-Up Call for Every Business Nintendo is one of the most recognized brands on the planet. They guard their intellectual property fiercely, have weathered…
Fake IT Workers Are Showing Up at Offices — And They’re After Your Data
Cybercrime has never been more brazen. Ransomware gangs have long relied on phishing emails and malicious software to compromise businesses — but a group known as the Silent Ransom Group has taken…