Apple has once again released a new emergency security update to fix serious bugs in iOS and macOS that hackers are using to target iPhone and Mac users.

As reported by BleepingComputer, there are a total of three newly patched zero-day vulnerabilities, bringing the total number of zero-day vulnerabilities fixed so far this year to 16. [The first of these bugs (tracked as CVE-2023-41933) was found in the WebKit browser engine used in Safari, and the second (tracked as CVE-2023-41991) in the Security framework. Once these flaws are exploited, hackers can use malicious apps to bypass signature verification or gain the ability to execute arbitrary code using their own malicious sites. [Meanwhile, a third bug (tracked as CVE-2023-41992) was found in the kernel framework used to provide APIs and support for kernel extensions and kernel-resident device drivers. By exploiting this flaw, attackers can elevate privileges on vulnerable iPhones and Macs.

In its security advisory, Apple explains that all three of these zero-day flaws were discovered by Citizen Labs, but the company also reveals that they "may be actively exploited by hackers against versions of iOS prior to iOS 16.7."

Fortunately for iPhone and Mac users, Apple has already fixed these three zero-day bugs with the release of iOS 16.7/17.0.1, macOS 12.7/13.6, iPadOS 16.7/17.0.1, and watchOS 9.6.3/10.0.1 The company has already fixed these three zero-day bugs. Current owners of vulnerable Apple devices should install these emergency security updates.

Both older and newer Apple devices, including iPhone 8 or later, iPad mini 5th generation or later, Macs running macOS Monterey or later, and Apple Watch Series 4 or later are likely to install them since they are affected.

As is common with zero-day flaws such as the above, Apple has yet to provide additional details on how hackers have used these bugs in their attacks. The reason for this is to give the company's users the opportunity to update their devices before other hackers develop new ways to utilize these flaws in their attacks.

While updating all devices may seem cumbersome and tedious at times, it is the best way to stay safe from cyber attacks, malware, and other online threats. This is because hackers often target users who have not updated their devices by creating zero-day flaw exploits that have already been patched.

In addition to keeping your devices up-to-date, you may also want to consider using the best Mac antivirus software to further protect your Mac. Of course, Macs come with Apple's built-in antivirus software called XProtect, but like Microsoft Defender on Windows, it can miss the latest threats. Similarly, paid antivirus software often comes with additional features to keep you safe online, such as VPNs and password managers.

While there is no iPhone equivalent to the best Android antivirus apps, Intego's Mac antivirus software, including Intego Mac Internet Security X9 and Intego Mac Premium Bundle X9, can scan for malware on iPhones and iPads connected to a Mac via USB.

While 19 zero-day flaws may seem like a lot, it is good that Apple patches these flaws in a timely manner, as some other companies wait to fix them until after they have been used in a major cyber attack.