iOS 16.3. macOS 13.2 updates include fixes for top vulnerabilities found by security researcher

Apple has patched two major security vulnerabilities with iOS 16.3 and macOS 13.2 for supported iPhone, iPad and Mac models, according to details shared by a security research firm. These updates were rolled out to users last month and come with important bug fixes and security fixes. Apple credited researchers with discovering the flaws, which allowed a remote user to bypass protections put in place by Apple and gain access to a user’s personal data as well as their camera, microphone, and phone history. calls.

Security research company Trellix explains in a blog post that Apple introduced security patches to block the ForcedEntry security exploit used by NSO Group, creator of the nasty Pegasus malware, in 2021. However, the company discovered that these safety protections could be bypassed by a remote control. user, and reported the defects to Apple.

Apple reportedly used a protocol called NSPredicateVisitor to add security to its NSPredicate tool, which developers use to filter code. Exploits like ForcedEntry could bypass this mechanism to gain access to the user’s device.

An attacker could use the security flaw to bypass the sandbox that blocks an app from accessing data from other apps on the device, as well as sensitive or personal information, according to the security firm. These can include messages, call logs, photos, location details, as well as smartphone hardware such as camera and microphone.

However, there is no evidence that these flaws have been exploited by malicious actors. Meanwhile, users who have updated their devices to the latest version of iOS and macOS should be protected against these security flaws, according to Trellix.

Apple also updated its release notes for iOS 16.3 and macOS 13.2, and both documents credit Trellix senior security researcher Austin Emmitt with identifying two security flaws – CVE-2023-23530 and CVE- 2023-23531 – on mobile and desktop operating systems. Meanwhile, Trellix thanked Apple for working quickly with the company to fix the two security flaws.