APPLE FIXES TWO ZERO-DAYS EXPLOITED IN TARGETED IPHONE ATTACKS

Summary from the TLDR InfoSec newsletter

Apple has released emergency security updates to patch two new zero-day vulnerabilities exploited in sophisticated attacks against iPhones. The first vulnerability is a flaw in CoreAudio, which can be exploited by processing an audio stream in a malicious file to execute remote code. The second vulnerability is a flawed RPAC that allows attackers with read or write access to bypass Pointer Authentication, which is a security feature to protect against memory vulnerabilities.