Did you know your Apple device might be at risk from actively exploited vulnerabilities? Apple has just released emergency updates for macOS and iOS, addressing two critical flaws that hackers are already leveraging. Here’s what you need to know.
The Vulnerabilities:
- CVE-2024-44308 (JavaScriptCore)Allows attackers to execute arbitrary code via malicious web content.Targets Intel-based Mac systems.
- Allows attackers to execute arbitrary code via malicious web content.
- Targets Intel-based Mac systems.
- CVE-2024-44309 (WebKit)Enables cross-site scripting attacks through malicious web content.Also impacts Intel-based Mac systems.
- Enables cross-site scripting attacks through malicious web content.
- Also impacts Intel-based Mac systems.
Both vulnerabilities were flagged by Google’s Threat Analysis Group (TAG) and have already been exploited in the wild.
Why This Matters:
Apple hasn’t shared specifics about the attacks or their scope, but the urgency of the updates speaks volumes. Earlier this month, North Korean hackers were discovered targeting macOS users with phishing emails and malware that bypasses Apple’s security—proving these threats are real and evolving.
What You Should Do:
Apple urges users to install the latest updates immediately:
- iOS 18.1.1 (or 17.7.2 for older devices)
- macOS Sequoia 15.1.1
These updates are critical for safeguarding your device and data.
