{"id":212146,"date":"2021-03-27T01:41:50","date_gmt":"2021-03-26T22:41:50","guid":{"rendered":"https:\/\/en.buradabiliyorum.com\/update-your-apple-ios-devices-right-now-to-patch-an-active-vulnerability-review-geek\/"},"modified":"2021-03-27T01:41:50","modified_gmt":"2021-03-26T22:41:50","slug":"update-your-apple-ios-devices-right-now-to-patch-an-active-vulnerability-review-geek","status":"publish","type":"post","link":"https:\/\/buradabiliyorum.com\/en\/update-your-apple-ios-devices-right-now-to-patch-an-active-vulnerability-review-geek\/","title":{"rendered":"#Update Your Apple iOS Devices Right Now to Patch an Active Vulnerability \u2013 Review Geek"},"content":{"rendered":"

“#Update Your App<\/a>le iOS Devices Right Now to Patch an Active Vulnerability \u2013 Review Geek”<\/strong><\/p>\n

\n\u00a0<\/p>\n
\"An
Apple<\/span><\/figcaption><\/figure>\n

You know that age-old advice of waiting before you update a device, just in case? Ignore that. Update your iPad right now. Update your Apple Watch right now. Update your iPhone right now. Don\u2019t even finish reading this article; go update your stuff, then come back. Apple just\u00a0<\/span>patched a big problem<\/span><\/a>.<\/span><\/p>\n

Apple started rolling out\u00a0<\/span>iOS 14.4.2, iPadOS 14.4.2, and watchOS 7.3.3<\/span><\/a>\u00a0today, and none of those updates add new features. Instead, the update plugs a major security hole that affects iPads, iPhones, and Apple Watches.<\/span><\/p>\n

Unfortunately, the vulnerability Apple patched is a zero-day, which means some bad actors have already exploited it. Clement Lecigne of Google Threat Analysis Group and Billy Leonard of Google Threat Analysis Group first reported it under\u00a0<\/span>CVE-2021-1879<\/span><\/a>. Apple admits in a support page that it\u2019s aware of at least one report that \u201cthis issue may have been actively exploited.\u201d<\/span><\/p>\n

The problem stems from the Webkit browser engine. It allows bad actors to launch universal cross-site scripting attacks by tricking users into visiting a maliciously crafted web page or other web content. A cross-site scripting attack would let hackers obtain information from other web pages you have open on your iPad, iPhone, or Apple Watch. If you think that through, you can imagine how bad that could be.<\/span><\/p>\n

With the update, you\u2019re safe (though you should still use caution when visiting new websites), so go update your stuff now. This is not one you want to put off. You can get the updates going now by performing a \u201ccheck for updates\u201d on each of your devices.<\/span><\/p>\n

via MacRumors<\/a><\/small>\n<\/div>\n