Apple Confirms It Was A Victim In Watering Hole Attack. Who’s Next?

The report describes a watering-hole campaign that compromised a popular mobile application developer site and used a previously unknown Java zero-day to infect employees at major technology firms (Twitter, Facebook, Apple). The compromise implanted malware on staff systems and is likely to have affected other developers who visited the site, indicating an active, high-impact targeted campaign.