Apple has released iOS 16.6.1 and sex good morning videosiPadOS 16.6.1, fixing two extremely dangerous security flaws in its mobile operating systems.
One flaw fixes an issue in which "processing a maliciously crafted image may lead to arbitrary code execution." Apple says it's aware of a report that this issue, which affects all newer iPhones and iPads, may have been actively exploited in the wild, which makes it the worst kind of security flaw.
The bug was found by the University of Torontoʼs Munk School security research facility Citizen Lab, which shared some more info on how it works and who's affected. Apparently, this exploit (which Citizen Lab named the Blastpass Exploit Chain) was capable of compromising iPhones running the latest version of iOS (16.6). Worse, it could do this without any interaction from the victim.
You May Also Like
SEE ALSO: Got an internet-enabled chastity device? Check your online security now.
The flaw was found while checking the device owned by a person employed by a civil society organization based in Washington DC. On their device, the vulnerability was use to deliver the notorious Pegasus spyware.
The new iOS 16.6.1 patch fixes another critical bug, which also may have been actively exploited. It affects newer iPhones and iPads, and it also meant a hacker could take over someone's phone by sending them a maliciously crafted attachment.
Related Stories
- Apple's Vision Pro will have iPad and iPhone apps from the start
- Apple might launch an 'iPhone Ultra' that plays nice with Vision Pro
- Apple's iPhone 15 launch preview: Everything you need to know
- Apple's Emergency SOS iPhone feature saved a woman and her dog caught in a flash flood
- Apple sends invites for iPhone 15 event on Sept. 12
You can (and should) update your devices now by going to Settings - General - Software Update.
Topics Cybersecurity