[ad_1]
Apple has asked people who own iPhones to urgently update their iOS to 14.4.2 in light of security threats, according to a report from Forbes.
Forbes He said Apple has issued the update “for a vulnerability that has already been exploited by attackers.”
The publication quoted Apple informing users that the security update in iOS 14.4.2 “addresses a vulnerability in Apple’s WebKit browser engine,” one that has already been “actively exploited.”
According to the report, users running versions prior to 14.4.2 on their devices may be exposed to the security issue as a result of which attackers may already have details that they are likely to use to compromise other Apple devices.
The threat has been taken so seriously by Apple, that for users with older devices, it has released iOS 12.5.2 so that people who have older iPhones 6, iPhones 5S, and iPads can also update their iOS 12 operating systems.
Although details are scant, Apple has said that the vulnerability that the update fixes “could allow a malicious website to perform arbitrary cross-site scripting,” according to Forbes.
The magazine quotes the SME application security leader at Immersive Labs as saying that “cross-site scripting provides attackers with multiple means of attacking you.”
“This could include redirecting you to a malicious or spoofing site, taking actions on a site on your behalf, or even getting information from your browsing session. Since this is in WebKit, it could affect any site you visit and potentially many applications as good, “was quoted by Forbes like saying.
Don’t wait to update
The post has warned that contrary to the usual act of users of waiting to update the iOS due to bugs in previous versions, this update is primarily focused on security and therefore should be downloaded immediately.
The measure will protect users from any malicious attack.
The subsequent update, iOS 14.5, to be released in April, will see new features like app tracking transparency that is expected to affect apps like Facebook, which tracks user activity across all apps and services.
[ad_2]
