Apple has released iOS 16.6.1 and iPadOS 16.6.1, fixing two extremely dangerous security flaws in its mobile operating systems.
One flaw fixes an issue in which "processing a maliciously crafted image may lead to arbitrary code execution." Apple says it's aware of a report that this issue, which affects all newer iPhones and iPads, may have been actively exploited in the wild, which makes it the worst kind of security flaw.
The bug was found by the University of Torontoʼs Munk School security research facility Citizen Lab, which shared some more info on how it works and who's affected. Apparently, this exploit (which Citizen Lab named the Blastpass Exploit Chain) was capable of compromising iPhones running the latest version of iOS (16.6). Worse, it could do this without any interaction from the victim.
The flaw was found while checking the device owned by a person employed by a civil society organization based in Washington DC. On their device, the vulnerability was use to deliver the notorious Pegasus spyware.
The new iOS 16.6.1 patch fixes another critical bug, which also may have been actively exploited. It affects newer iPhones and iPads, and it also meant a hacker could take over someone's phone by sending them a maliciously crafted attachment.
You can (and should) update your devices now by going to Settings - General - Software Update.
Copyright © 2023 Powered by
Update your iPhone now to fix this critical security flaw-燕尔新婚网
sitemap
文章
3
浏览
93
获赞
38
Sarah McBride and the 'fierce urgency of now' in LGBTQ advocacy
Every day of Pride Month, Mashable will be sharing illuminating conversations with members of the LGApple might add third rear camera to this year's 'iPhone 11'
The marquee feature on this year's new iPhones, tentatively called the "iPhone 11," could be a thirdInstagram tests letting you rethink your terrible new username
Instagram is about to give its users some time to think over that name change.An automatic usernameBeware: Phishing attacks are on the rise
Be on guard, internet: Phishing cyberattacks and other social engineering exploits such as "vishing"Two goats strut their stuff in a highly meme
If you're going to spend a lot of time online, it's unhealthy to go too long without watching a videFBI says Apple employee tried to steal self
Few people outside of Apple really know what the end goal of its top secret "Project Titan" car deveDad finds out the hard way to not swear in front of his toddler
Attempting to keep a clean mouth when there's little kids around is no easy task if you often use coMilkshake Duck: We need to stop idolizing unremarkable people on the internet
Going viral sucks. We're not talking about influencers and celebrities who make their careers off thHow to fix missing data and battery drain in Apple's iOS 14, WatchOS 7
If you've been struggling with a fresh set of technical issues since the mid-September launch of iOSTindstagramming is the newest way to be a huge creep
Have you gotten an Instagram DM from a guy you weren’t into on Tinder? Congrats, you’veWhat would make you trust an AI assistant? How about a face?
Interacting with AI is fast becoming the norm, thanks to the ubiquity of Siri, Alexa, and the GoogleStop what you're doing and update Google Chrome
Google is urging Chrome users to update the web browser right away to patch a zero-day vulnerabilityTwitter and Facebook restrict sharing of disputed 'NY Post' article ahead of election
Facebook and Twitter restricted the spread of a disputed New York Postarticle on Wednesday.The articMicrosoft announces Hololens 2 at MWC 2019
Mobile World Congress is a show primarily for phone announcements, but Microsoft used it to unveil iApple now sells refurbished iPhone X from $769
There's a new, interesting option for anyone looking to buy an iPhone without spending a fortune: A