Malwarecritical
Apple addresses two zero-days exploited in Operation Triangulation spyware campaign
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2023-32439+1 related CVE | Type Confusion in Apple WebKit (Safari, iOS, iPadOS, macOS) Enables Code Execution | 8.8 group max | 24% | KEV | KEV |
From the original article
2 min read at therecord.media
Apple has released patches for two zero-days exploited in a spyware campaign that the Russian government has blamed on the U. S. The campaign, dubbed Operation Triangulation, was publicized by the Moscow-based cybersecurity company Kaspersky in early June after the malware was detected on iPhones within its network, as well as on Wednesday in new research describing how the spyware behaves.
therecord.media
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.