Daily digest
SharePoint and Apple devices: risks to check
These updates concern product security. For the user, the main thing is to check whether the issue affects his system; for the shareholder, do not confuse a product vulnerability with a proven hack of the company.
Microsoft – SharePoint vulnerability
Code injection in SharePoint could allow an authorized attacker to execute code over a network. For an organization using this product, it is a prompt to verify the system version and follow remediation guidance. The entry in the CISA KEV catalog refers to a known exploited vulnerability, but does not demonstrate a hack of Microsoft or financial losses to the company.
Apple – risk in CoreGraphics
An out-of-bounds write in CoreGraphics on iOS, macOS and iPadOS could lead to arbitrary code execution. Users should check whether security updates apply to their devices. The CISA KEV entry does not indicate that all devices are under attack, and by itself does not establish a financial impact on Apple.
Prepared from official company documents with the help of AI and checked automatically and editorially: every number in the text matches the original source. This is not investment advice.