In a newly-published blog, Sophos principal research scientist Paul Ducklin explains how the CVE-2022-32893 flaw in WebKit, which underpins the Safari browser, could allow a “booby trapped web page” to trick iPhones, iPads and Macs into running unauthorised and untrusted software code. Security company Sophos has shed some light on how the patched iOS 15.6.1 flaws could have led to real-life attacks.
So what are you waiting for? Go to your iPhone Settings > General > Software Update and download and install iOS 15.6.1 now. However, I recommend you make an exception and update to iOS 15.6.1-issues in the Kernel are about as bad as you can get, so it’s not worth taking the risk. Some people don’t like to update to iPhone versions straight away to wait for any bugs to be ironed out. Taking this into account, he recommends you update your iPhone to iOS 15.6.1 as soon as possible. He says it’s possible the two vulnerabilities “could be chained together to allow attackers to remotely gain full access to victims’ devices.”
“Apple iOS 15.6.1 is an important update,” says independent security researcher Sean Wright.
0 kommentar(er)
