Apple Inc (NASDAQ:AAPL) has released a series of critical software updates for users of iPhones, iPads, and Macs, to address an issue which the company says hackers “may have actively exploited".
This vulnerability has the potential for hackers to take complete control of an infected device, through kernel and webkit exploits.
The company confirmed two vulnerabilities that were found on the WebKit, the browser engine that powers Safari and other apps, and the kernel, which is essentially the core of the operating system.
Apple said that this exploit may be initiated through “maliciously crafted web content” or via an application that may be able to “execute aribitary code with kernel privileges”.
The tech company advised all users to update their devices which it confirms "provides important security updates and is recommended for all users".
????ATTENTION????
Apple found two 0-days actively in use that could effectively give attackers full access to device.
For most folks: update software by end of day
If threat model is elevated (journalist, activist, targeted by nation states, etc): update now https://t.co/BUEn08260X
— Rachel Tobac (@RachelTobac) August 18, 2022
Am I affected?
To date, there has been no confirmed reports of specific cases where the security flaw had been used against people or devices, and Apple has made no official statement on the issue further to an update on its website.
However, users have been advised to immediately update their devices with the new iOS 15.6.1 software.
Affected devices include the iPhones 6S and later models, several models of the iPad (including the fifth generation and later), all iPad Pro models as well as the iPad Air 2, and Mac computers running MacOS Monterey. It also affects some iPod models.
The update can be obtained by going to the “Settings” section of a device and choosing the “Software Update” option.
Rachel Tobac, CEO of SocialProof Security, says: “These types of vulnerabilities happen. And any use of these exploits tend to be targeted toward journalists/activists.
“Update your devices and move on with your day.”