Apple Blunts Zero-Day Attacks With iOS 17.4 Update

Apple Blunts Zero-Day Attacks With iOS 17.4 Update

March 5, 2024 at 04:00PM

Apple released urgent iOS updates, including iOS 17.4 and iPadOS 17.4, to address multiple security flaws and potential zero-day exploits in the wild. The vulnerabilities, including kernel and RTKit issues, could bypass memory protections. Additionally, the company patched privacy flaws and warned of more fixes to come. Exploited iOS versions were also identified.

Key takeaways from the meeting notes:
– Apple issued urgent security patches for iPhones with the release of iOS 17.4, iPadOS 17.4, and iOS 16.7.6 to address multiple security flaws, including zero-day exploits.
– The two exploited vulnerabilities, Kernel (CVE-2024-23225) and RTKit (CVE-2024-23296), allow attackers to bypass kernel memory protections, posing serious security risks.
– Additional vulnerabilities, including a privacy flaw in Accessibility and a Safari Private Browsing bug, were also patched in the updates.
– The company mentioned the likelihood of more fixes being added later to address other vulnerabilities.

If you need further details on any specific points or if you require additional information, feel free to ask!

Full Article