Apple warns of security vulnerability that lets hackers into iPhones, Macs

The company said it is “aware of a report that this issue may be actively exploited”, CNN has reported. Users can learn how to update the software by following the instructions below Apple website,

Apple instructed its users to update their software after the discovery of a vulnerability in its operating system. Apple did not disclose whether it had information about the extent to which the issue was exploited. Apple released two security reports about the issue on Wednesday, though they haven’t received widespread attention outside of tech publications.

Security experts have advised users to update the affected devices – iPhones6S and later models; Multiple iPad models, including 5th generation and later, all iPad Pro models and iPad Air 2; And Mac computers running macOS Monterey. It also affects some iPod models.

SocialProof Security CEO Rachel Toback said Apple’s explanation of the vulnerability means a hacker could get “full administrator access to the device” so they can “execute any code as if they are you, the user”.

Toback said those who should be particularly attentive to updating their software are “in the public eye” such as activists or journalists who could be targets of sophisticated nation-state espionage.

The vulnerability also extends to Mac computers running the company’s Monterey OS as well as Apple’s Safari browser on Big Sur and Catalina operating systems, the company said in a later update.

Commercial spyware companies such as Israel’s NSO Group are known to identify and exploit such vulnerabilities, exploiting them in malware that secretly infects target’s smartphones, snatching their content and accessing them in real-time. surveys goals.

The US Department of Commerce has blacklisted the NSO Group. Its spyware has been used against journalists, dissidents and human rights activists in Europe, the Middle East, Africa and Latin America.

Security researcher Will Strafech said he didn’t see any technical analysis of the vulnerabilities Apple just patched. The company has acknowledged similar serious flaws in the past and Strafetch, estimating perhaps a dozen occasions, noted that it was aware of reports that such security holes were being exploited.

(with inputs from agencies)

first article