Apple says zero-day bugs exploited against ‘specific targeted individuals’ using iOS

Apple released security updates (iOS 18.4.1, macOS Sequoia 15.4.1, Apple TV and Vision Pro patches) to fix two zero-day vulnerabilities that may have been exploited in targeted attacks: a Core Audio flaw that can execute malicious code from crafted media, and a pointer-authentication bypass. One bug was credited to Google’s Threat Analysis Group, raising concerns about potential government-backed exploitation; Apple urged users to update devices to mitigate active risks.