Apple Security Engineering News Today

Here’s why Apple apologised to a security researcher - Rashtra News A security researcher by the name illusionofchaos recently said that he pointed out certain security flaws to Apple. In a blog post, the researcher said, “I’ve reported four 0-day vulnerabilities this year between March 10 and May 4, as of now three of them

The next iMessage update in iOS 17, called PQ3, will boost security to guard against future quantum computers, which aren't around yet.

The published version of Forbes’ CIO newsletter delivers the latest news for chief innovation officers and other technology-focused leaders to inboxes every Thursday.

Microsoft's Teams, Edge, and Skype have been given emergency updates to address zero-day vulnerabilities impacting the WebP code library or lilwebp, tracked as CVE-2023-4863, and the libvpx video codec library, tracked as CVE-2023-5217, both of which could be exploited to achieve arbitrary code execution, reports BleepingComputer.

Google has allocated a fresh CVE ID to a security vulnerability in libwebp, which had been exploited as a zero-day in recent attacks.

No one mentioned that libwebp, a library found in millions of apps, was a 0-day origin.

Security pros urged to patch zero-day immediately Mozilla's Firefox browser and Thunderbird email client. Google also issued a patch for the vulnerability in Chrome on Monday.

A critical 0-day exploit triggers emergency security updates for 1Password, Signal, Chrome, Firefox and more—just days after the emergency iOS 16.6.1 security update.

Updates are now available to patch a vulnerability that would allow attackers to run malicious code.

A newly discovered, actively exploited critical security flaw has put millions of internet users in danger.