Apple has released a new security update for iPhone, iPad, MacBook and Apple Watch to fix two zero-day vulnerabilities. Zero-day vulnerabilities are security flaws that the software vendor does not know about and have not yet been patched. This makes them a serious threat, as attackers can use them without encountering any resistance from the software.

The latest update resolves the vulnerabilities CVE-2023-41064 and CVE-2023-41061. It allows attackers to install malware on a device by downloading a malicious image or attachment. Malware can then be used to steal data, track the user’s location, or control the device.

The vulnerabilities were first reported by Citizen Lab, a spyware research group at the University of Toronto’s Munk School of Global Affairs and Public Policy. Citizen Lab says the vulnerabilities were used to install NSO Group’s Pegasus spyware on iPhones. I don’t know, Pegasus is a powerful spyware that infects your phone and sends data such as photos, messages, audio/video.

Therefore, all users are recommended to update their devices to the latest version of iOS, iPadOS, macOS and watchOS as soon as possible. Updates can be downloaded from the Settings app.

This is the second zero-day vulnerability that Apple has patched in recent months. In July, Apple released an update to fix a zero-day vulnerability that attackers used to install malware on iPhones and iPads.

The incidence of zero-day vulnerabilities is increasing, and it is important for users to keep their devices updated with the latest security patches. This way they can help protect themselves from these serious threats.