One of the bugs, which affects macOS as well as older versions of iPhones, could allow an attacker to execute arbitrary code with kernel privileges.
https://threatpost.com/apple-patches-zero-days-attack/174988/
FBI: Another Zoho ManageEngine Zero-Day Under Active Attack
-
APT attackers are using a security vulnerability in ManageEngine Desktop Central to take over servers, deliver malware and establish network persistence.
https://threatpost.com/zoho-zero-day-manageengine-active-attack/177178/