From one of my computer and network security newsletters...

quote:

Apple Releases Updates to Fix Three Zero-Days
(May 24, 2021)
Apple released updates to macOS 11.4, 10.15, 10.14; iOS and iPadOS 14.6; watchOS 7.5 and tvOS 14.6 to address three zero day vulnerabilities hackers exploited in the wild.  The XCSSET malware exploited the weakness in CVE-2021-30713 to bypass macOS privacy protections while CVE-2021-30663 and CVE-2021-30665 impact WebKit on Apple TV 4K and Apple TV HD devices. Zero-day vulnerabilities have been showing up more in Apple’s security advisories, often tagged as exploited prior to fixes being released.

N.B.: These are being actively exploited in the wild!

Related articles:
- https://support.apple.com/en-us/HT201222
- https://support.apple.com/en-us/HT212529
- https://support.apple.com/en-us/HT212532
- https://www.jamf.com/blog/zero-day-tcc-bypass-discovered-in-xcsset-malware/
- https://www.bleepingcomputer.com/news/security/apple-fixes-three-zero-days-one-abused-by-xcsset-macos-malware/
- https://www.theregister.com/2021/05/24/ios_macos_patches/
- https://arstechnica.com/gadgets/2021/05/hackers-exploit-a-macos-0day-that-allows-them-to-screenshot-infected-macs/

Thanks. Updated everything tonight.

Thanks for the FYI

Y'all are welcome

Mac, iPad, iPhone, Watch all updated...

Thanks, updating right now.

I'm going to give this one last bump, for the weekend crowd. (Normally would not do this, but this round of updates appears to be pretty critical.)

Thanks. We are doing the computers and iPad right now.