Apple Urges Immediate Update to iOS 18.1.1 Due to Active Security Threats

Emergency patches address two critical vulnerabilities already exploited in attacks, affecting iPhones, iPads, and Macs.

Apple has released iOS 18.1.1 and iOS 17.7.2 to address two serious security vulnerabilities, CVE-2024-44308 and CVE-2024-44309, both of which have been actively exploited.
The JavaScriptCore vulnerability (CVE-2024-44308) could allow attackers to execute malicious code via compromised web content, potentially redirecting users to harmful sites.
The WebKit flaw (CVE-2024-44309) enables cross-site scripting attacks, allowing hackers to inject malicious code into trusted websites or applications.
The U.S. Cybersecurity and Infrastructure Agency (CISA) has issued a warning urging users and businesses to apply these updates immediately to prevent potential system control by attackers.
Apple has also rolled out corresponding updates for macOS Sequoia 15.1.1, visionOS 2.1.1, and Safari 18.1.1 to secure its broader ecosystem from these vulnerabilities.