Apple, along with Google, will be addressing a browser security vulnerability thatβs been around for nearly 20 years, according to a report by (paid subscription required). The breach is being later this week and involves an IP address with a special purpose.
Devices connected to the internet use IP addresses for device and location identification, and the IP address 0.0.0.0 is used for special circumstances (itβs usually used as a stand-in address until the actual address is available). Oglio researcher found that hackers have been exploiting the way Safari, Chrome, and Firefox handle queries to a 0.0.0.0 IP address. According to Forbes, the browsers send the queries βto other IP addresses, including βlocalhost,β a server on a network or computer that is typically private and is often used to test in-development code.β A hacker can send a request to the address to get private data.
Forbes confirmed with Apple that Safari in macOS Sequoia will block any website attempting to contact the 0.0.0.0 IP address. Google has a that describes its plans to do a similar thing with Chrome. Mozilla told Forbes that it does not have plans to block 0.0.0.0 queries in Mozilla, but the company is researching the issue.
Since the fix is based on Safari and not OS based, it will be included in Safari 18 when it becomes available for older versions of macOS, such as Sonoma and Ventura.
How to protect yourself from hacker attacks
Apple has protections in place within macOS and the company releases security patches through OS updates, so itβs important to install them when they are available. If Apple pulls back an update, the company will reissue it as soon as it is properly revised with corrections.
Macworld has several guides to help, including a guide onΒ whether or not you need antivirus software, aΒ list of Mac viruses, malware, and trojans, and aΒ comparison of Mac security software.
