Apple releases iPhone, iPad, and Watch security patches for zero-day bug under active attack

Apple has released an update for iPhones, iPads and Watches to patch a security vulnerability under active attack by hackers.

The security update lands as iOS 14.4.2 and iPadOS 14.4.2, which also covers a patch to older devices as iOS 12.5.2. watchOS also updates to 7.3.3.

Apple said the vulnerability, discovered by security researchers at Google’s Project Zero, may have been “actively exploited” by hackers. The bug is found in WebKit, the browser engine that powers the Safari browser across all Apple devices.

It’s not known who is actively exploiting the vulnerabilities, or who might have fallen victim. Apple did not say if the attack was targeted against a small subset of users or if it was a wider attack. It’s the third time (by our count) that Apple has pushed out a security-only update this year to fix flaws under active attack. Earlier this month the company released patches for similar vulnerabilities in WebKit.

Update today.



from TechCrunch https://ift.tt/3rru8VB

Comments

Popular posts from this blog

Microsoft says it has no plans to add more backward compatible titles for Xbox One, but says Project Scarlett will run games from all four Xbox generations (Tom Warren/The Verge)

Internal docs: Facebook employees created a test account in 2019 and within days, it was recommended extreme and conspiratorial content, including QAnon Groups (Brandy Zadrozny/NBC News)

Local officials, educators, and advocacy groups are frustrated by refusal of ISPs to provide data on how many customers they signed up via low income programs (Cyrus Farivar/NBC News)