
Google and Apple released urgent software updates following the discovery of attacks exploiting zero-day vulnerabilities. The updates aim to safeguard a wide array of users from a hacking campaign that, according to TechCrunch, primarily targeted specific individuals utilizing susceptible versions of devices and applications.
Image credit: Vladimir Fedotov/Unsplash
Image credit: Vladimir Fedotov/Unsplash
Google issued patches for several flaws in its Chrome browser, noting that one was already being actively exploited by malicious actors. The company initially withheld specifics but on Friday updated the information, indicating the vulnerability was jointly found by Apple’s security team (Apple Security Engineering) and Google’s Threat Analysis Group. The latter focuses on investigating activities by hackers backed by states and spyware manufacturers.
Concurrently, Apple rolled out update packages for its products: iPhone, iPad, Mac computers, the Vision Pro headset, Apple TV set-top boxes, Apple Watch smartwatches, and the Safari browser. In the security advisory for iPhone and iPad, the company reported fixing two errors. Apple representatives stated they are aware the issue might have been leveraged in an “extremely sophisticated attack against specific targeted individuals” using devices below iOS version 26. Such phrasing from Apple typically signifies the company acknowledges targeted assaults on its users using zero-day vulnerabilities. Often, such attacks originate from groups like NSO Group or Paragon Solutions, operating with support from government entities exerting pressure on journalists and human rights defenders.