Security News > 2022 > March > Apple emergency update fixes zero-days used to hack iPhones, Macs

Apple has released security updates on Thursday to address two zero-day vulnerabilities exploited by attackers to hack iPhones, iPads, and Macs.
In security advisories published today, Apple said that they're aware of reports the issues "May have been actively exploited."
Even though these zero-days were likely only used in targeted attacks, it's still strongly advised to install today's security updates as soon as possible to block potential attack attempts.
In January, Apple patched two more actively exploited zero-days that could enable attackers to achieve arbitrary code execution with kernel privileges and track web browsing activity and the users' identities in real-time.
In February, Apple released security updates to fix a new zero-day bug exploited to hack iPhones, iPads, and Macs, leading to OS crashes and remote code execution on compromised devices after processing maliciously crafted web content.
These first three zero-days also impacted iPhones, Macs running macOS Monterey, and multiple iPad models.
News URL
Related news
- Apple backports zero-day patches to older iPhones and Macs (source)
- A PostgreSQL zero-day was also exploited in US Treasury hack (CVE-2025-1094) (source)
- Serbian police used Cellebrite zero-day hack to unlock Android phones (source)
- Apple fixes WebKit zero-day exploited in ‘extremely sophisticated’ attacks (source)
- Apple Releases Patch for WebKit Zero-Day Vulnerability Exploited in Targeted Attacks (source)