On Monday, Apple rolled out a patch for new Apple’s 0-day vulnerability. We ask all our readers to update their iPhone to iOS 14.7.1, iPad to iPadOS 14.7.1, and macOS to Big Sur 11.5.1.
Apple said that it had released 13 security updates with the release of this update. According to the company, this memory corruption vulnerability (CVE-2021-30807) in the IOMobileFrameBuffer component may have been actively exploited in the wild. Apple didn’t disclose more details on the 0-day vulnerability for security reasons. You can visit the Apple security updates page to see the recently released updates.
List of 13 0-day vulnerabilities Fixed in 2021:
CVE-2021-1782: Privilage Escalation
CVE-2021-1870: Arbitrary Code Execution
CVE-2021-1871: Arbitrary Code Execution
CVE-2021-1879: Cross-Site Scripting
CVE-2021-30657: Bypass Gatekeeper checks
CVE-2021-30661: Arbitrary Code Execution
CVE-2021-30663: Arbitrary Code Execution
CVE-2021-30665: Arbitrary Code Execution
CVE-2021-30666: Arbitrary Code Execution
CVE-2021-30713: Bypass Privacy Preferences
CVE-2021-30761: Arbitrary Code Execution
CVE-2021-30762:Arbitrary Code Execution
CVE-2021-30807: IOMobileFrameBuffer Memory Corruption
Apple urged to install the security updates as soon as possible on iPhone, iPad, and mac to be secure themselves from the attacks that targetted Apple’s 0-Day vulnerability.
You may also like these articles:
Arun KL is a cybersecurity professional with 15+ years of experience in IT infrastructure, cloud security, vulnerability management, Penetration Testing, security operations, and incident response. He is adept at designing and implementing robust security solutions to safeguard systems and data. Arun holds multiple industry certifications including CCNA, CCNA Security, RHCE, CEH, and AWS Security.
“Knowledge Arsenal: Empowering Your Security Journey through Continuous Learning”
"Cybersecurity All-in-One For Dummies" offers a comprehensive guide to securing personal and business digital assets from cyber threats, with actionable insights from industry experts.
BurpGPT is a cutting-edge Burp Suite extension that harnesses the power of OpenAI's language models to revolutionize web application security testing. With customizable prompts and advanced AI capabilities, BurpGPT enables security professionals to uncover bespoke vulnerabilities, streamline assessments, and stay ahead of evolving threats.
PentestGPT, developed by Gelei Deng and team, revolutionizes penetration testing by harnessing AI power. Leveraging OpenAI's GPT-4, it automates and streamlines the process, making it efficient and accessible. With advanced features and interactive guidance, PentestGPT empowers testers to identify vulnerabilities effectively, representing a significant leap in cybersecurity.
Tenable BurpGPT is a powerful Burp Suite extension that leverages OpenAI's advanced language models to analyze HTTP traffic and identify potential security risks. By automating vulnerability detection and providing AI-generated insights, BurpGPT dramatically reduces manual testing efforts for security researchers, developers, and pentesters.
Microsoft Security Copilot is a revolutionary AI-powered security solution that empowers cybersecurity professionals to identify and address potential breaches effectively. By harnessing advanced technologies like OpenAI's GPT-4 and Microsoft's extensive threat intelligence, Security Copilot streamlines threat detection and response, enabling defenders to operate at machine speed and scale.