According to PANews, Apple has released an urgent security update to address two zero-day vulnerabilities affecting Mac users with Intel architecture. These vulnerabilities are linked to the WebKit and JavaScriptCore engines and could be exploited through malicious websites or emails, potentially allowing attackers to execute arbitrary code and install malware on devices.
The vulnerabilities, identified as CVE-2024-44308 (JavaScriptCore vulnerability) and CVE-2024-44309 (WebKit vulnerability), were discovered by Google's Threat Analysis Group. This discovery suggests a possible connection to state-sponsored hacking activities. Apple strongly advises users to promptly update to macOS Sequoia 15.1.1 and the latest versions of iOS and iPadOS to mitigate security risks.