Security · High impactFan score 69 · Tier A3 sources
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
The Hacker News · By info@thehackernews.com (The Hacker News) ·
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a medium-severity security flaw impacting multiple Apple operating systems to its Known Exploited Vulnerabilities (KEV) catalog, following reports of active exploitation. The vulnerability in…
The Brief
- A large-scale watering hole attack associated with Russian hackers targets iOS and Android users visiting compromised or fake sites.
- Attackers exploit previously patched iOS and Android flaws, so unpatched devices remain vulnerable.
- CISA added a medium-severity flaw affecting multiple Apple operating systems to its Known Exploited Vulnerabilities catalog after reports of active exploitation.
Why it matters
Patched flaws are still being used against unpatched phones, so developers and their teams need to keep mobile devices updated, including test and admin devices.
Who’s affected
- iOS users
- Android users
- Developers and teams with unpatched iPhones or Android devices
What to do
- Update iOS and Android devices to the patched versions that fix the flaws
- #security
- #ios
- #android
- #malware
- #exploit
- #watering-hole
Timeline
Researchers report the watering hole attacks exploiting patched iOS and Android flaws
CISA adds the medium-severity Apple flaw to its Known Exploited Vulnerabilities catalog
BleepingComputer
Hackers use n-day exploits in zero-click attacks on iOS, Android devices
Biz & IT - Ars Technica
Hackers exploited iOS and Android flaws to infect phones
The Hacker News
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
Full coverage · 3 sources
- 1d ago ↗
The Hacker News
Hackers Exploit Patched Apple Flaw to Deliver Info-Stealing Malware, CISA Says
- 2d ago ↗
Biz & IT - Ars Technica
Hackers exploited iOS and Android flaws to infect phones - 2d ago ↗
