Apple has released an urgent security update for its iOS operating systems, anticipating the upcoming release of the main version iOS 18.5. The aim of this timely update is to address vulnerabilities described as "critical," following reports of their exploitation in complex cyberattacks directed at specific users.
In an official statement, Apple confirmed: "We are aware of a report that indicates a potential misuse of this vulnerability in a targeted attack on specific individuals." The company noted that the update provides important error corrections and security updates, as well as addresses a rare issue hindering wireless CarPlay connections in certain vehicles.
The security updates are designed to eliminate two major vulnerabilities that allowed malicious actors to exploit and use audio functionality on phones. This was used against specific individuals, such as government officials and journalists.
The second vulnerability concerns the Return Pointer Authentication Code – a security feature that prevents the manipulation of code from compromised sources and ensures the potential for reading and writing, which was exploited to bypass security measures. iPads, Apple TVs, and MacBooks were also affected, but the latest update resolves these issues.
This occurs amid rising concerns about data security levels from iPhones in Great Britain after Apple’s response to the British government’s access to such data. This feature, termed "Enhanced Data Protection" (ADP), encrypts the majority of files uploaded to the cloud from start to finish, allowing access only by the user.
Reports earlier this month highlighted that the government released a directive in compliance with the 2016 Investigatory Powers Act, requiring providers to allow access to all files, fully encrypted under the user’s Apple account. Experts advise all users to install the update immediately after it is released to ensure full protection and utilize new technical enhancements expected in future iOS 18.5 releases.
