Hello and welcome to the Wednesday, November 5th, 2025 edition of the Sands Internet Storm Centers.

Stormcast, my name is Johannes Orich, recording today from Jacksonville, Florida.

And this episode is brought you by the Sands.edu graduate certificate program in cloud security.

And we got patches from Apple.

Now, the patches were actually released on Monday.

I didn't get them into the Monday or Tuesday podcast.

So covering them now, we got a total of 110 vulnerabilities addressed in these patches.

And as typical for Apple, we got updates for pretty much every single product of theirs,

with a lot of overlap between those products, just because the underlying operating system

has a lot of overlap as well. There are a couple of

vulnerabilities here that I sort of point out, and that's memory corruption vulnerabilities in

Image I.O. Also in font parser. These type of vulnerabilities have in the past been exploited

for remote code execution. Apple's notes to their patches are always very sparse,

so really hard to tell how exploitable these memory corruptions are

and whether they actually will lead to code execution.

Also, we got at least one memory corruption in WebKit

that, of course, affects Safari

and anything sort of exposed via a website that a user may visit.

There's also, as usual for Apple, a separate Safari update.

The reason you have this is because some of the older operating systems,

well, they may now need

a newer version of Safari to address the WebKit issues that Apple Patch, because they

...