Cert NZ issues security warning for iPhone and iPad: Hackers actively exploit vulnerability

The crown agency CERT NZ (the Computer Emergency Response Team) issued an advisory about a security vulnerability with iOS that Apple says is being actively exploited by hackers.

The problem relates to iOS (the software that runs iPhones), iPadOs, and tvOS (the software that runs Apple TV).

“Immediately update your Apple iOS, iPadOS, and tvOS devices to version 14.4 where the update is available. For most users, a pop-up window should alert you that an update is available – select ‘Update now,'” the advisory says by CERT NZ.

“If you don’t get a pop-up message, follow these steps: Go to Settings> System> Software Update. There, select” Update Software. “

The Herald tried, but iOS 14.4 was not yet available. Apple normally offers updates on an ongoing basis.

Details are scant at this stage, but an Apple notification page on the issue reads: “A malicious app can elevate privileges” if it exploits the security vulnerability, indicating the possibility of a hacker taking control of a device.

“Apple is aware of a report that this problem may have been actively exploited,” says the iPhone maker on its safety notifications page.

CERT NZ recommends that users enable an automatic software update feature for software on any device.