Apple says zero-day bugs exploited against ‘specific targeted individuals’ using iOS – TechCrunch

🔍 Summary:

Apple has recently updated its software across various products to address two critical security vulnerabilities that were potentially being exploited in sophisticated cyberattacks targeting specific individuals. These vulnerabilities, classified as zero days, were previously unknown to Apple during the exploitation period. One of the bugs, discovered by Google’s Threat Analysis Group, suggests the possibility of government-backed attackers, as this group typically investigates state-sponsored cyber threats. This bug involves Apple’s Core Audio and could be triggered by a maliciously crafted media file to execute harmful code on devices. The other vulnerability, found solely by Apple, could allow attackers to bypass pointer authentication, a key security mechanism in Apple’s software architecture.

In response, Apple has released updates for macOS Sequoia, iOS, Apple TV, and its Vision Pro mixed-reality headset to patch these security flaws. The exact number of affected customers and whether any data was compromised remain unclear, as Apple has not provided further details.

📌 Source: https://techcrunch.com/2025/04/16/apple-says-zero-day-bugs-exploited-against-specific-targeted-individuals-using-ios/