From PC Mag: Time to update: Apple is patching a pair of flaws that hackers may be actively exploiting to attack iPhones, iPads, and macOS devices.
The company released security updates today to address the threat, which affects WebKit, the browser engine for Safari.
Apple learned of the flaws through Google security researcher Clément Lecigne, who works for the company’s Threat Analysis Group, a team that defends against state-sponsored hacking groups and commercial surveillance companies.
There’s not a lot of details about the attack. But the vulnerabilities can be triggered when processing malicious web content. This suggests the hackers were abusing the flaws by sending victims booby-trapped web pages, perhaps through a phishing message or website.
View: Full Article