Apple and Google issue urgent security patches to combat active hacking campaign
Okay, so Apple and Google just dropped some pretty crucial software updates. And when those two giants move in unison, you know something's up. It turns out they're trying to shut down a hacking campaign that's been targeting some of their users. We don't know exactly how many people are affected, but the fact that both companies are scrambling to fix it means it's serious.
Google pushed out patches for Chrome, and get this – one of the bugs was already being exploited by hackers. Can you imagine? They were actively using it before Google could even get a fix out the door. What’s even weirder is that Google was super tight-lipped about the details at first.
However, they later updated their info, giving a shout-out to Apple's security team and Google's own Threat Analysis Group. Now, this group usually deals with government hackers and spyware creators, which suggests this whole operation might be the work of some state-sponsored actors.
Apple, not to be outdone, released updates for basically everything – iPhones, iPads, Macs, even the Vision Pro, Apple TV, Apple Watches, and Safari. They patched a couple of bugs and mentioned that they knew about a "sophisticated attack" targeting specific individuals using older versions of iOS. When Apple uses that kind of language, it usually means some folks were hit by zero-day exploits – vulnerabilities that the software makers didn't even know existed at the time.
It's often the case that government-backed hackers use these zero-days with tools and spyware from companies like NSO Group (the ones behind Pegasus) to target journalists, activists, and anyone else who might be a thorn in someone's side. It's a scary thought that anyone could be a target.
Source: TechCrunch