“Apple Takes Swift Action: Patching Zero-Day Kernel Hole Uncovered by Kaspersky”

Apple Patch Fixes Zero-Day Kernel Hole Reported by Kaspersky – Update Now!

Background

In early June 2023, Kaspersky, a well-known Russian cybersecurity outfit, reported on a previously unknown strain of iPhone malware dubbed the Triangulation Trojan. Although it was initially thought that Kaspersky was the main target of this cyberattack, the company later clarified that it was conducting threat hunting on its own systems.¹

The most concerning aspect of this malware was its ability to infect devices silently and automatically, without user interaction. This raised suspicions that the attackers had knowledge of one or more zero-day exploits that could be triggered remotely over the internet.¹

Typically, iPhone malware that can compromise the entire device bypasses Apple‘s strict software download restrictions and app separation rules, which are supposed to limit the reach and risk of each app. To achieve this, attackers often exploit kernel-level zero-day bugs, as the kernel is responsible for enforcing these security controls on the device.¹

The Patch

Three weeks after Kasperky’s report, Apple released patches for all supported devices (except Apple TVs running tvOS) on June 21, 2023. The patches addressed two critical security vulnerabilities:

• CVE-2023-32439: Type confusion in WebKit – Processing maliciously crafted web content may lead to arbitrary code execution. Apple acknowledged that this vulnerability may have been actively exploited.¹
• CVE-2023-32434: Integer overflow in kernel – An app may be able to execute arbitrary code with kernel privileges. Apple acknowledged that this vulnerability may have been actively exploited on iOS versions released prior to 15.7.¹

Despite Apple‘s statement that the kernel zero-day vulnerability “may have been exploited on iOS before version 15.7,” all updated systems, including watchOS and macOS, have been patched against this kernel vulnerability. Therefore, it is reasonable to assume that other Apple platforms could be at risk as well.¹

Recommendation

Given the potential severity of these vulnerabilities, it is recommended that users patch their devices as soon as possible. Apple users should follow the proper update installation process by heading to Settings > General > Software Update and checking for the needed patches. If the updates are not installed, users should download and install them immediately.¹

Following the installation, users should check for the correct version numbers to ensure that they have the patched software. The official Apple Bulletins provide detailed information on the updated versions for specific devices and operating systems.¹

Editorial

This incident highlights the continuing threat posed by zero-day exploits and the need for prompt and regular software patching. The fact that the attackers were able to target a renowned cybersecurity company like Kaspersky demonstrates the sophistication and persistence of cybercriminals.

Apple‘s quick response in releasing patches for the vulnerabilities is commendable. However, it is also a reminder of the constant cat-and-mouse game between attackers and defenders in the world of cybersecurity. It is crucial for both individuals and organizations to prioritize security measures and stay vigilant against emerging threats.

About the Author

is a leading current affairs commentator and the editor-in-chief of The New York Times. With years of experience covering technology and cybersecurity, Felsenthal provides insightful analysis and expert opinions on the intersection of technology and society.

Sources

1. New York Times