APPLE ISSUES SECURITY ALERT OVER ACTIVE IPHONE ATTACKS

Apple has warned that millions of iPhones and iPads are exposed to active cyberattacks stemming from critical vulnerabilities in WebKit, the browser engine that underpins Safari and all third-party browsers on iOS.

- 

The company confirmed the flaws were exploited in real-world attacks before being patched, prompting renewed urgency around installing the latest software updates.

Apple disclosed the issue through its security advisories, stating that the vulnerabilities allowed malicious websites to execute arbitrary code when visited by a victim.

Because Apple requires all iOS browsers to use WebKit, the exposure extended beyond Safari to include Chrome, Firefox, and other browsers available on the App Store.

WHAT THE WEBKIT VULNERABILITIES ALLOW ATTACKERS TO DO

The affected flaws reside deep within WebKit's handling of web content. According to Apple, attackers could craft specially designed websites that exploit memory corruption bugs, enabling them to run unauthorized code on a device simply by convincing a user to open a page.

Once exploited, such vulnerabilities can give attackers broad access within the app sandbox and, in some cases, allow them to escalate privileges further. Security researchers note that this class of exploit is often used as the first step in more sophisticated attacks, including spyware installation, data extraction, and device surveillance.