Apple’s security updates patch gaps in operating systems for the iPhone, iPad, and Mac products, as well as its Safari web browser, according to a series of security-related announcements on Nov. 19.

Specifically, the software updates target iOS 17.7.2 and iPadOS 17.7.2, iOS 18.1.1 and iPadOS 18.1.1, visionOS 2.1.1, macOS Sequoia 15.1.1, Safari 18.1, and Safari 18.1.1.

Apple noted that in all the above-listed cases, the patches fix two significant vulnerabilities in WebKit and JavaScriptCore. These vulnerabilities, which could lead to arbitrary code-execution attacks through malicious web content, may have been exploited by hackers.

“Apple is aware of a report that this issue may have been actively exploited on Intel-based Macs,” the company wrote in several of the security alerts.

No information was available as to the possible identity of any cyber-threat actors who may have exploited these vulnerabilities. In general, if hackers are able to execute arbitrary code through maliciously crafted web content, this could put sensitive user data at risk, potentially leading to unauthorized access, stolen credentials, or even device control.

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) also took note of the security gaps in the listed Apple products.

Similarly, iOS 17.7.2 and iPadOS 17.7.2 extend coverage to slightly older devices like the iPad Pro 10.5-inch and the iPad 6th generation.

Mac users running macOS Sequoia 15.1.1 or Safari on macOS Ventura and macOS Sonoma are also affected, as are early adopters of visionOS 2.1.1 on the Apple Vision Pro.

Among the multiple stories over the last few weeks about Chinese intelligence and hackers either attempting to, or outright gaining access, to U.S. cell phone networks (with reports stating President Trump and his team were targeted), comes news of a hack of T-Mobile’s network.

T-Mobile’s network was reportedly breached in a Chinese cyber-espionage campaign targeting multiple U.S. and international telecom companies, according to the NY Post, citing the Wall Street Journal.

Hackers tied to a Chinese intelligence agency accessed the network to spy on high-value intelligence targets, though the timing of the attack was not disclosed.

The NY Post, citing WSJ, wrote that the extent of data taken from T-Mobile customers remains unclear.

The FBI and CISA recently revealed that China-linked hackers intercepted surveillance data meant for U.S. law enforcement after breaching several telecom firms.

Earlier reports indicated that Chinese hackers accessed networks of broadband providers, including Verizon, AT&T, and Lumen, extracting data from systems used for court-approved wiretapping.

“T-Mobile is closely monitoring this industry-wide attack,” a spokesperson for the company said. “At this time, T-Mobile systems and data have not been impacted in any significant way, and we have no evidence of impacts to customer information.”

Sure.