Security news aggregator

Latest coverage for Apple

Apple develops operating systems and devices whose vulnerabilities, security advisories, and updates affect users, enterprises, and connected ecosystems.

25 headlines in this view

Refine the feed

Search across headline titles and summaries.

Tag briefing

Background for this topic.

Apple’s ecosystem consists of proprietary operating systems like iOS and macOS, powering devices such as iPhones, iPads, and Macs. These platforms integrate hardware-based security features—such as secure enclaves for cryptographic operations, mandatory app sandboxing, and biometric authentication—to protect user data and system integrity. Apple’s tightly controlled app distribution through the App Store reduces exposure to malware but does not eliminate risks from zero-day exploits or sophisticated attacks targeting system vulnerabilities.

Security practitioners must prioritize timely application of Apple’s security updates, as unpatched iOS and macOS flaws are frequently targeted for privilege escalation and remote code execution. Credential attacks against Apple ID and iCloud services remain common, enabling unauthorized access to sensitive data and backups. Understanding Apple’s privacy settings, encryption mechanisms, and forensic artifact availability is critical for detecting and mitigating threats within environments that include Apple devices.

Volume over time

Weekly headline count for the current query.

Showing 20 most recent headlines of 25 Filtered view

U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a Cisco IOS flaw to its Known Exploited Vulnerabilities catalog. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) added a Cisco IOS flaw, tracked as CVE-2008-4128, to its Known Exploited Vulnerabilities (KEV) catalog. Cisco IOS 12.4 running on Cisco 871 Integrated Services Routers contains multiple CSRF flaws in […]

More from Security Affairs 14 Jul 2026, 6:05 a.m. Theme · 6 stories Actively exploited CVE-2008-4128 America Apple CISA Cisco CVE Flaw Routers Vulnerability
Bank Info Security 1 year, 6 months ago

Apple Patches Flaw That Allows Kernel Security Bypassing

Microsoft Uncovered Flaw That Affects macOS System Integrity Protection FeatureApple patched a vulnerability that allows hackers to bypass a key security feature in macOS by through third-party kernel extensions. Microsoft researchers uncovered the flaw tracked as CVE-2024-44243. The flaw could enable hackers to install rootkits and create malware with privileged access.

More from Bank Info Security 15 Jan 2025, 10:30 a.m. CVE-2024-44243 Apple Bypass CVE Flaw macOS Malware Microsoft Patch Research Vulnerability

Microsoft has shed light on a now-patched security flaw impacting Apple macOS that, if successfully exploited, could have allowed an attacker running as "root" to bypass the operating system's System Integrity Protection (SIP) and install malicious kernel drivers by loading third-party kernel extensions

More from The Hacker News 15 Jan 2025, 5:53 a.m. CVE-2024-44243 Apple Bypass CVE Flaw macOS Microsoft Patch Root Access Rootkit Vulnerability

Just a day after Cisco disclosed CVE-2023-20198, it remains unpatched, and one vendor says a Shodan scan shows at least 10,000 Cisco devices with an implant for arbitrary code execution on them. The vendor meanwhile has updated the advisory with more mitigation steps.

More from Dark Reading 18 Oct 2023, 8:16 a.m. Actively exploited CVE-2023-20198 0-Day Apple Cisco Compromise CVE Disclosure Mitigation Vendor

Just a day after Cisco disclosed CVE-2023-20198, it remains unpatched, and one vendor says a Shodan scan shows at least 10,000 Cisco devices with an implant for arbitrary code execution on them. The vendor meanwhile has updated the advisory with more mitigation steps.

More from Dark Reading 18 Oct 2023, 8:11 a.m. Actively exploited CVE-2023-20198 0-Day Apple Cisco Compromise CVE Disclosure Mitigation Vendor