Skip to main content

Make sure your Apple devices are updated to protect against this vulnerability

If you have an Apple device like an iPhone or an iPad, then you should make sure that you’ve updated your software to iOS 14.4.2 as soon as possible. The update includes a patch for a vulnerability that is currently being exploited by hackers.

As reported by TechCrunch, the update is to protect against a zero-day vulnerability discovered by security researchers working at Google’s Project Zero.

As detailed on the Apple website, the update which was released on Friday, March 26, includes a fix for an issue in WebKit. WebKit is the engine used by Apple’s browser Safari. However, the vulnerability doesn’t only apply to those who use Safari as their browser. Even if you use another browser, your device is still vulnerable until this issue is patched.

Apple describes the issue on its website as follows: “Processing maliciously crafted web content may lead to universal cross-site scripting. Apple is aware of a report that this issue may have been actively exploited.”

The phrase “actively exploited” means that hackers could be currently using this vulnerability in some way right now, although Apple doesn’t give any details about how widespread the attacks may be, who is responsible for them, or how serious they are.

In any case, it’s a good idea to make sure you haven’t skipped updating your Apple devices and that you have updated to iOS 14.4.2 or iPadOS 14.4.2.

For those using older Apple devices, there is an equivalent update for iOS which is iOS 12.5.2. There is also an update for Apple Watch, with watchOS 7.3.3.

Most Apple devices should update automatically unless you have disabled automatic updates. As annoying as updates can be, it’s worth keeping automatic updates enabled to make sure you’re kept safe from this kind of issue.

Editors' Recommendations

Georgina Torbet
Georgina is the Digital Trends space writer, covering human space exploration, planetary science, and cosmology. She…
Apple’s iOS 15.3 update fixes critical Safari security bug
iPhone showing Home Screen with widgets resting on soft white cloth background.

Apple has just released iOS 15.3, and while this latest update doesn’t add any significant new features, it addresses at least one critical security flaw. Earlier this month, software engineer Martin Bajanik of FingerprintJS found a serious vulnerability in Safari 15, the browser included in iOS 15 and iPadOS 15, that could leak browsing history information and even credentials from online services that a person is using, such as Google, YouTube, Amazon, and sites using WordPress.

As Bajanik explains, many websites use an API called IndexedDB to request that browsers like Safari and Chrome store information in a local database on a person’s device. Under normal circumstances, a given website should only be able to request information about the databases that it created — any others should be invisible to it.

Read more
Fortnite finally comes back to Apple devices via GeForce Now
Spider-Man in Fortnite.

Nvidia announced today that it's bringing Fortnite back to Apple platforms with an open beta on Android and iOS devices through its cloud gaming service, Nvidia GeForce Now. This limited-time testing will take place on the Nvidia GeForce Now Android app and the iOS Safari web browser. Note that it's the Apple web browser, not an app.

GeForce Now members can sign up for the open beta before it starts next week. However, there's limited space available, so everyone who signs up won't necessarily receive an invite. Those who want to participate but don't yet have a Nvidia GeForce Now account can sign up for free.

Read more
Update your Mac now to fix vulnerability that gives full access to spying apps
Stock photo of laptop with code on its screen

Microsoft is warning Mac users to update to the latest version of MacOS Monterey after it found a vulnerability in Apple's Transparency, Consent, and Control (TCC) feature.

Exploiting this vulnerability could allow malicious actors to spoof the TCC and plant malware or hijack another app on the computer.

Read more