Apple backports zero-day patches to older iPhones and Macs

Published on April 1, 2025

Apple has released security updates that backport fixes for actively exploited vulnerabilities that were exploited as zero-days to older versions of its operating systems. [...]

Continue reading on website
Other news

Critical auth bypass bug in CrushFTP now exploited in attacks

April 1, 2025
Attackers are now targeting a critical authentication bypass vulnerability in the CrushFTP file transfer software using exploits based on publicly available proof-of-concept code. [...]

Lucid PhaaS Hits 169 Targets in 88 Countries Using iMessage and RCS Smishing

April 1, 2025
A new sophisticated phishing-as-a-service (PhaaS) platform called Lucid has targeted 169 entities in 88 countries using smishing messages propagated via Apple iMessage and Rich Communication Services (RCS) for Android.Lucid's unique selling point lies in its weaponizing of legitimate communication platforms to sidestep traditional SMS-based detection mechanisms."Its scalable,