Don't forget to update. 🚨

Apple and Google released an emergency security update plugging a confirmed Zero-day vulnerability that was actually deployed for attack, as a highly sophisticated attack targeting a specific group of individuals.

.

The Apple side stated that it had received reports that the vulnerability may have been used in advanced attack operations against devices still running versions of the system before iOS 26. This vulnerability is associated with WebKit, the main web engine of the iPhone, iPad and Mac, making the impact cover many Apple devices. Despite the company not revealing the technical details of the attack, it clearly confirmed that this incident actually happened, not just a theoretical risk.

.

At the same time, Google also issued a security patch to Chrome. At first it did not disclose details and only identified it as a bug under coordination, before later confirming that the vulnerability was a zero-day attack, reflecting the disclosure and plug-in coordination between the two companies.

.

The entry of the Google Threat Analysis Group, or TAG, to the discovery of this vulnerability is a significant warning sign because the team specializes in tracking state-level hackers and commercial spyware developers, rather than conventional malware, making it highly likely that this attack is not a random victim sowing, but a highly valued targeted operation.

.

Despite both Apple and Google insisting that the attack did not occur on a large scale, the Zero-day vulnerability in browsers and operating systems still constitutes a high level of risk. Users should therefore update their devices and software to the latest version as soon as possible, in order to shut down the attack channel and reduce future risk.

.

For practices, Apple and Google recommend that users update their operating systems and software to the latest version as soon as possible. iPhone, iPad, and Mac users should check and update iOS, iPadOS, and macOS to versions where the vulnerability has been fixed.

.

Google Chrome users, meanwhile, should update their browser to the latest version on all systems, whether Windows, macOS, Linux, or ChromeOS, to reduce the risk of attack through a Zero-day vulnerability that is confirmed to have actually been used.

.

Source: bleepingcomputer theregister

# Includes IT matters # Cough to know # IT News# IT