本則回應

• MrOrz標記此篇為：⭕ 含有正確訊息

  理由

  確實有此事件。訊息所付網址為美國國土安全部旗下的網路安全及基礎設施安全局（Cybersecurity and Infrastructure Security Agency, CISA）公告。
  
  此次修補的漏洞有：
  CVE-2021-30858 - 受害裝置處理惡意網站內容時，攻擊者可執
  閱讀更多

  出處

  漏洞與蘋果更新相關新聞
  https://www.ithome.com.tw/news/146698
  https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9459
  
  美國網路安全及基礎設施安全局公告，內附 Apple 公司相關公告連結
  https://us-cert.cisa.gov/ncas/current-ac⋯y-updates-address-cve-2021-30858-and-cve
  
  通用漏洞披露公告
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30858
  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30860

  蘋果緊急修補遭NSO開採的安全漏洞

  https://www.ithome.com.tw/news/146698

  NSO公司打造的Pegasus間諜程式，利用蘋果作業系統零時差漏洞，駭入極權國家監視對象的iPhone，迫使蘋果緊急更新了所有受漏洞影響的OS平臺

  資安人科技網

  https://www.informationsecurity.com.tw/article/article_detail.aspx?aid=9459

  https://us-cert.cisa.gov/ncas/current-activity/2021/09/13/apple-releases-security-updates-address-cve-2021-30858-and-cve

  Cannot get data from URL

  CVE - CVE-2021-30858

  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30858

  CVE® is a list of records — each containing an identification number, a description, and at least one public reference — for publicly known cybersecurity vulnerabilities. The mission of the CVE Progra

  CVE - CVE-2021-30860

  https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-30860

  CVE® is a list of records — each containing an identification number, a description, and at least one public reference — for publicly known cybersecurity vulnerabilities. The mission of the CVE Progra