ZeroDay Articles on TUAW - The Unofficial Apple Weblog

Oracle releases v11 fix for zero-day Java security flaw

by Michael Grothaus (Jan 14th, 2013)

Oracle has released an official fix for the Java security flaw that was reported by CERT (the Computer Emergency Readiness Team) on January 11. Shortly after the flagging by CERT, Apple took steps to disable the Java plug-in on all Macs running OS X 10.6 or later by amending the XProtect ...

Apple releases slew of updates, fixes Zero Day bug

by Michael Grothaus (Apr 14th, 2010)

Apple has released a slew of updates in the last few days, including a security update that fixes the Zero Day bugs discovered by Charlie Miller and revealed at CanSecWest. In addition to the MacBook Pro and MobileMe Backup updates, Apple has also released: 27-inch iMac SMC Firmware Update 1.0 ...

20 zero-day security holes in Mac OS X to be revealed

by Michael Grothaus (Mar 20th, 2010)

Charles Miller, a computer security researcher who's worked with the NSA, is planning to reveal 20 zero-day security holes in Mac OS X at CanSecWest, a digital security conference, in Vancouver BC next week. A zero-day security hole is a weakness in software that neither the makers of the software ...

Zero-day exploit for QuickTime in the wild

by Robert Palmer (Sep 18th, 2008)

A hacker who found a vulnerability in QuickTime said he posted the attack code online after Apple ignored him for a month. The code exploits a flaw in QuickTime that causes a crash when a unusually-long parameter is passed along with a movie file. While it's not demonstrated, the hacker claims that ...