The bugs are being actively exploited and affect iPhones, iPads, and Macs, allowing attackers to take complete control of a victim’s device.
Last week, two severe vulnerabilities were announced by Apple:
- CVE-2022-32894 – which enables a malicious app to have the highest (kernel) privileges on a device, and
- CVE-2022-32893 – which enables an attacker to remotely execute code on the device through a malicious website.
These vulnerabilities are of the highest severity and span multiple attack vectors for exploitation. Unpatched devices pose a substantial risk to any business, leaving them exposed to cyber attacks and data breaches arising from exploitation.
Identifying users with poor security hygiene who have unpatched devices is tricky without the right tool.
To help manage business risks and prevent costs incurred from a breach, Trustd MTD can automatically restrict access to company data for any iOS devices that haven’t patched within an acceptable timeframe, detect and block communication traffic between malicious apps and cyber criminals and block access to malicious websites from any mobile device.
The combination of protection technologies in Trustd MTD provides businesses with the peace of mind that they’re protected against these and other types of mobile threats.
The Trustd app for iOS warns users to update their devices to protect them against new vulnerabilities. Administrators of Trustd MTD can see at a glance which users need to update their devices.