It has been reported this morning that Apple has been attacked by the same hackers who targeted Facebook recently. The security breach was nothing major, and speaking to Reuters Apple has said that only a small number of employee Macs were breached. The fruit company will indeed be working with the authorities however, to investigate the attack, but there was not evidence that any data was actually leaked.
The hackers used the same zero-day exploit that resulted in a large number of Facebook employees having malware installed on their laptops. The source of this malware comes from a compromised website for software developers, says Apple.
Apple has identified malware which infected a limited number of Mac systems through a vulnerability in the Java plug-in for browsers. The malware was employed in an attack against Apple and other companies, and was spread through a website for software developers. We identified a small number of systems within Apple that were infected and isolated them from our network. There is no evidence that any data left Apple. We are working closely with law enforcement to find the source of the malware.
Apparently Apple will be releasing a tool later today that will protect users against the malware used to infect employee computers. In a statement to The Loop, apple said the following:
Since OS X Lion, Macs have shipped without Java installed, and as an added security measure OS X automatically disables Java if it has been unused for 35 days. To protect Mac users that have installed Java, today we are releasing an updated Java malware removal tool that will check Mac systems and remove this malware if found.
We will let you know when this tool is released. In the mean time, if you are worried about your security, make sure you disable Java.