Apple has released emergency updates to fix two zero-day vulnerabilities in iOSthat are being used to attack iPhone.
The two vulnerabilities are tracked as CVE-2024-23225 and CVE-2024-23296 and are located in the iOS Kernel and RTKit respectively. Attackers with arbitrary kernel read and write capabilities can bypass kernel memory protections
Apple has patched the two zero-day vulnerabilities on devices running iOS 17.4, iPadOS 17.4, iOS 16.76, and iPad 16.7.6.
See also: Microsoft: Critical vulnerability in Exchange Server was used as a zero-day
The devices affected by the vulnerabilities are:
- iPhone XS and later, iPhone 8, iPhone 8 Plus, iPhone X, iPad 5th generation, iPad Pro 9.7-inch, and iPad Pro 12.9-inch 1st generation
- iPad Pro 12.9-inch 2nd generation and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 6th generation and later, and iPad mini 5th generation and later
Apple has not released details about how the vulnerabilities were exploited, but iOS zero-day vulnerabilities are typically used in government- sponsored spyware attacks targeting individuals such as journalists, opposition politicians, and dissidents.
Apple recommends installing security updates immediately to protect iOS devices from attacks that can exploit the two zero-day vulnerabilities.
With the new vulnerabilities, Apple has patched a total of three zero-days so far in 2024.
See also: Google: Spyware vendors are behind most zero-day exploits
Last year, the company fixed a total of 20 zero-day bugs.
What are the latest techniques for dealing with Zero-Day vulnerabilities?
One of the most modern techniques for dealing with Zero-Day vulnerabilities is the use of artificial intelligence and machine learning to detect and prevent these attacks. These technologies can analyze large volumes of data and identify patterns that could indicate a potential attack.
Additionally, the use of intrusion detection systems (IDS) and intrusion prevention systems (IPS) is another modern technique for dealing with iOS Zero-Day vulnerabilities. These systems can identify and address threats before they affect the system.
See also: DarkMe Malware Targets Merchants Using Microsoft SmartScreen Zero-Day Vulnerability
Finally, continuous updating and monitoring of systems is essential to protect against Zero-Day vulnerabilities. Updating software and security systems with the latest versions can help prevent attacks, while monitoring systems can allow for the immediate detection and response to any breaches.
Source: www.bleepingcomputer.com
