Archive — US — techcrunch
Apple fixes new security flaw used in ‘extremely sophisticated attack’
Apple has patched a zero-day vulnerability in WebKit that may have been exploited in a sophisticated attack against targeted individuals. This flaw allowed hackers to escape WebKit's sandbox protections. The fix has been rolled out for Macs, iPhones, iPads, Safari, and the Vision Pro headset, impacting devices running software before iOS 17.2. Apple did not disclose the attackers or their targets.
Key points
- Apple released security patches for a zero-day bug in WebKit.
- The bug allowed hackers to escape the WebKit sandbox, potentially compromising user data.
- The fix was distributed to multiple devices including Macs, iPhones, iPads, and the Vision Pro headset.
- The vulnerability affected devices with software older than iOS 17.2.
- Apple previously used similar language for another exploit in February, indicating a serious threat to specific users.
Why it matters
- Cybersecurity incidents are rising, with an increasing focus on mobile and web app vulnerabilities.
- As of 2025, trends show a growing emphasis on Zero Trust security models, making regular software updates critical in mitigating such attacks.
- The use of sophisticated cyber attack language by companies highlights the evolving nature of threats in the tech ecosystem.
Apple's proactive stance in patching vulnerabilities reflects the critical importance of cybersecurity in a landscape threatened by increasingly advanced attacks, reinforcing the need for vigilance and regular software updates.