Apple on Monday released a new version of the iPhone and iPad’s
operating systems to fix a vulnerability that hackers were exploiting
in the wild, meaning they were taking advantage of it to hack Apple
devices.
On the security update page, Apple wrote that it “is aware of a report
that this issue may have been actively exploited.” This is the language
Apple uses when someone alerts the company that they have observed
hackers exploiting a bug against targets in the real world, as opposed
to a vulnerability found by a researcher in a controlled environment,
so to speak.
Since then, things have improved. According to TechCrunch’s count of vulnerabilities, since January 2022, there have been nine bugs in iOS
that “may have been actively exploited,” of which four in WebKit. The others were three in the kernel, the core component of the operating
system; one in AppleAVD, the company’s audio and video decoding
framework; and one in IOMobileFrameBuffer, a kernel extension.
This latest bug was in WebKit, Apple’s browser engine that’s used in Safari, and a historically popular target for hackers, since it can
open up access to the rest of the device’s data.
In 2021, Motherboard reported that in just the first four months of
that year, Apple had patched seven bugs exploited in the wild, of which
six were in WebKit, a number that experts considered high at the time.
https://techcrunch.com/2023/02/13/apple-releases-new-fix-for-iphone-zero-day-exploited-by-hackers/?guccounter=1&guce_referrer=aHR0cHM6Ly9uZXdzLmdvb2dsZS5jb20v&guce_referrer_sig=
AQAAAJsineSoWlmCeRsLecQJWqdnDhvKc1gDqwEyU4JnpyQrQWIFnuW9gNaDttTFcye0AjH8NSXv6MwK6RrwmdNoqjCpiWUBFzAiOvi5xveOXh0EXoeL4WOF2xGxq2Hd8066O3JORrQTMipqGCHa8zucfLhBtz7zEvw1EVxWgYjE23xZ
--- SoupGate-Win32 v1.05
* Origin: fsxNet Usenet Gateway (21:1/5)