In a major security update, technology giant Apple said it has patched a security flaw that the company said might have been actively exploited to plant malware on macOS and iOS devices.

Apple, however, did not share details on the in-the-wild attacks or the profile of the targets, nor did it come up with any IOCs (indicators of compromise) or any supplementary data to help protectors search for signs of infections.

Instead, a line in Apple advisory simply reads: “Apple is aware of a report that this issue may have been actively exploited.”
This is the 13th zero-day flaw fixed by Cupertino in the first half of this year.

CVE-2021-30807, the newly fixed flaw, was reported anonymously to Apple and is labelled as a memory corruption fault that could be exploited to carry out code execution attacks with kernel privileges.

The faults were patched in the macOS Big Sur 11.5.1 update and a separate patch bundle that brings iOS and iPad devices up to version 14.7.1.

The latest patch comes less than a week after Apple shipped iOS 14.7 with patches for an extensive range of security problems.

Leave a Reply

Your email address will not be published. Required fields are marked *