Zack Whittaker / TechCrunch:
Apple confirms that iOS 16.1.2, released two weeks ago, fixed a zero-day security flaw in WebKit, found by Google, that allowed RCE and was actively exploited — Apple has confirmed that an iPhone software update it released two weeks ago fixed a zero-day security vulnerability that it now says was actively exploited.