Update Your iPhone and iPad to 14.4 Immediately to Fix Security Holes- January 29, 2021

Posted in News

Apple released iOS 14.4 and iPadOS 14.4 updates on Tuesday after it was confirmed that attackers may be able to remotely hack certain iPhones, iPads and iPods. Apple explained that one vulnerability, which is linked to the web browser rendering engine, WebKit, may allow remote hackers access to your device.

What Do I Need to Do?

If you don’t receive an automatic update notification, you need to update manually by navigating to Settings > General > Software Update.

What are the security holes?

This iOS vulnerability means an attacker could control your phone. According to the Kate Moussouris, founder of cybersecurity firm Luta Security, “[attackers] can “zombify” your device, You are being controlled from a distance.” Apple has admitted that its customers might be under active attack by hackers.

A second security threat Apple outlined involves a “malicious application” that may be able to elevate user privileges. In theory, Moussouris said, a malicious actor could exploit this with an app. “It is possible that a vector could be, almost like a sleeper cell of an app,” she said. “If you’re vulnerable, it tries to exploit it.”

More information is available Apple’s official security page (new window).