Apple issues security updates for critical zero-day flaws

Apple has released emergency security updates for iPhone, iPad, and Mac to address a critical zero-day vulnerability in the CoreGraphics component. This flaw, which involves an out-of-bounds write error, can be triggered by simply opening a specially crafted file, potentially allowing an attacker to execute malicious code on the device. The vulnerability was reported to Apple by Meta’s security team and may have already been exploited in sophisticated, targeted attacks.

In a related security incident, the developers of the Dolphin emulator reported that their Mac mini server was compromised due to a macOS screen-sharing vulnerability. Attackers exploited the active screen-sharing feature to gain unauthorized access, create SSH keys, and install Monero cryptocurrency mining software. While the Dolphin developers found no evidence that the emulator software itself was modified, they have since wiped and reinstalled the affected machine and urge all users to ensure their macOS systems are fully updated to the latest versions to prevent similar exploits.