{"id":105972,"date":"2020-11-06T03:51:06","date_gmt":"2020-11-06T00:51:06","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/why-you-should-update-your-iphone-right-now-and-no-its-not-just-for-the-emoji\/"},"modified":"2020-11-06T03:51:06","modified_gmt":"2020-11-06T00:51:06","slug":"why-you-should-update-your-iphone-right-now-and-no-its-not-just-for-the-emoji","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/why-you-should-update-your-iphone-right-now-and-no-its-not-just-for-the-emoji\/","title":{"rendered":"#Why you should update your iPhone right now. And no, it’s not just for the emoji."},"content":{"rendered":"

“#Why you should update your iPhone right now. And no, it’s not just for the emoji.<\/strong>”<\/p>\n

\n
\"Keep<\/source><\/source><\/picture>
\nKeep it locked down.
\n<\/figcaption>
\nImage: vicky leta \/ mashable\n<\/div>\n<\/figure>\n<\/div>\n

<\/p>\n

With everyone’s mind currently elsewhere, it’d be easy to overlook the little prompt on your iPhone telling you it’s time to update. That would be a mistake.\u00a0<\/p>\n

On Nov. 5, App<\/a>le introduced the latest series of updates<\/a> to iOS. And included along with the 117 new emoji are some very important security patches<\/a>. Specifically, the fixes included in iOS 14.2 address real security vulnerabilities being actively exploited right now. That means someone is currently using them against iPhone owners.\u00a0<\/p>\n

We know this because Ben Hawkes, the technical lead of Google’s Project Zero<\/a> bug hunting group, was kind enough to let the world know.\u00a0<\/p>\n

“Apple have fixed three issues reported by Project Zero that were being actively exploited in the wild,” Hawkes wrote on Twitter<\/a>. “CVE-2020-27930 (RCE), CVE-2020-27950 (memory leak), and CVE-2020-27932 (kernel privilege escalation). ”<\/p>\n

\n
\n
\n

Apple have fixed three issues reported by Project Zero that were being actively exploited in the wild. CVE-2020-27930 (RCE), CVE-2020-27950 (memory leak), and CVE-2020-27932 (kernel privilege escalation). The security bulletin is available here: https:\/\/t.co\/4OIReajIp6<\/a><\/p>\n

\u2014 Ben Hawkes (@benhawkes) November 5, 2020<\/a>\n<\/p><\/blockquote>\n<\/div>\n<\/div>\n

That “RCE,” which stands for “remote code execution,” is particularly noteworthy because it means \u2014 just like it sounds \u2014 that a hacker, criminal, or government could remotely run code on your phone. That is bad.\u00a0<\/p>\n

Thankfully, there is a fix. As long as you have an iPhone 6s (or more recent model), all you have to do is update your device. One other piece of relatively good news<\/a> is that, even though we know these exploits were actually being used, according to Shane Huntley of Google’s Threat Analysis Group<\/a>, the attacks using them didn’t have to do with the U.S. presidential election.\u00a0<\/p>\n

“Not related to any election targeting,” wrote Huntley<\/a> on Twitter<\/a>.<\/p>\n

\n
\n
\n

Targeted exploitation in the wild similar to the other recently reported 0days. Not related to any election targeting.<\/p>\n

\u2014 Shane Huntley (@ShaneHuntley) November 5, 2020<\/a>\n<\/p><\/blockquote>\n<\/div>\n<\/div>\n

Apple on Thursday also issued updates<\/a> in the form of iPadOS 14.2, watchOS 7.1, watchOS 6.2.9, watchOS 5.3.9, macOS Catalina 10.15.17, tvOS 14.2, and iOS 12.4.9 (for iPhones older than the iPhone 6s).\u00a0<\/p>\n

So go ahead and hit that update button, and know that you’re getting more than just new emoji. Although, to be fair, those inclusive emoji are pretty damn awesome.\u00a0
\n