Don't worry, you won't loose your data doing this as it merely overwrites the OS, it doesn't overwrite your files. Once there, I clicked on 'Reinstall macOS'.

Since I couldn't boot from 'Macintosh HD' anymore (I was just getting a white circle with a bar across it), I rebooted my macbook and pressed Cmd + r. Try to reinstall Mojave (this won't wipe your disk) - I wanted to return my macbook to as original a condition as possible, and I figured attempting to install Mojave was the best way to do it.I'm not sure if step 1 was necessary, but since I did this en route to fixing the loop of death, I'll list it here for you to consider. Since the beginning of the year, Apple has remedied 13 zero-days exploited to target devices running iOS, macOS, iPadOS, and watchOS.I was facing the same issue and was on the verge of reformatting my macbook. While no attacks have been observed on macOS computers, the flaw could theoretically be exploited on these devices as well, making the application of the security updates highly recommended. The security updates apply to all iPhone 6s models, the iPhone 7, the first generation of the iPhone SE, the iPad Air 2, the fourth generation of the iPad mini, and the seventh generation of the iPod touch. It's important to note that support for iOS 15 ended in September 2022, while Monterey and Big Sur are still supported by the vendor. These security updates have now been backported to iOS 15.7.9 and iPadOS 15.7.9, macOS Monterey 12.6.9, and macOS Big Sur 11.7.10 to prevent the utilization of this attack chain on these devices. The Cybersecurity and Infrastructure Security Agency (CISA) also issued an alert mandating federal agencies to patch by October 2, 2023. Upon receiving and processing the attachment, NSO's Pegasus spyware was installed, even on fully patched iOS (16.6) devices.Īpple issued fixes for these two vulnerabilities with macOS Ventura 13.5.2, iOS 16.6.1, iPadOS 16.6.1, and watchOS 9.6.2.

This attack involves sending specially crafted images in iMessage PassKit attachments to install spyware. Citizen Lab had earlier this month reported that CVE-2023-31064 and another vulnerability, CVE-2023-41061, were used in a zero-click attack chain known as BLASTPASS. This remote code execution flaw can be exploited by sending malicious images through iMessage. Apple has rolled out security updates to remedy a zero-day vulnerability, identified as CVE-2023-41064, that was being actively manipulated to infect iOS devices with NSO's Pegasus spyware.

Zero to One instal the new for apple