Apple Fixes FaceTime Bug and Two iOS Zero-Days

At the end of January, a Group FaceTime bug allowed callers to listen in and potentially view the people they were calling without the call being answered. Since then, Apple temporarily disabled the Group FaceTime service until updates became available. Apple has now released updates for iOS and macOS for the Group FaceTime bug and Live Photos. Apple also released updates for two zero-days discovered by Google researchers involving memory corruption issues for the Foundation and IOKit frameworks. The NJCCIC recommends patching systems as updates become available and enable the FaceTime service after updating if it was manually disabled. More details on the Apple vulnerabilities and updates can be found here.

AdvisoryNJCCICapple, Zero-Day