Apple Patches Major iPhone Bug linked to Gov't Spying
Apple has released a patch for a potentially serious iPhone bug. It's worth double-checking the patch was installed automatically and forcing it to do so if it has not.
The fix comes in version 15.0.2 of iOS and patches an actively exploited zero-day bug. That means attackers not only know about the security hole but were already using it before Apple could release a fix. In other words, Apple had a "zero days" head start in the battle between patching and hacking.
The bug involves memory corruption and means a correctly-targeted attack could allow malware to access parts of the memory that should be off-limits. That would allow execution of arbitrary code with kernel privileges, a particularly dangerous combination.
Kernel Attack Extremely Powerful
Arbitrary code effectively means an attacker can issue any command they like. Meanwhile, the kernel is the part of the operating system that connects applications with the various hardware components of a device, including the processor and memory.
For a computing device to work properly, the kernel needs constant unrestricted access to everything. That means a successful attacker using this bug would effectively have complete control of the device. In particular, they could install almost any malware they wanted.
While Apple isn't revealing much about the bug (to avoid tipping off even more would-be attackers), the rumor mill has linked it to Pegasus. That's an application produced by an Israeli company called NSO Group that many have labeled malware. (Source: theregister.com)
Pegasus is marketed to governments around the world and, depending on interpretation, used for cyber-surveillance of criminals or to spy on political opponents and human rights activists.
Manual Update Simple To Launch
Most iPhone users should have their device set to automatically install updates, including security patches. Given the severity of this security bug, it may be worth manually forcing an update if that hasn't happened yet.
On most devices this involves opening the Settings app, tapping on General and then tapping on Software Update. This will show which version of iOS is installed and whether an update is available. If the phone isn't yet on 15.0.2 there should be an option to manually start the update. (Source: apple.com)
What's Your Opinion?
Does this news surprise you? Do you generally consider Apple products more secure than Android or Windows devices? Should governments deal with surveillance companies whose tactics could put the general public at risk of hacking?
Most popular articles
- Which Processor is Better: Intel or AMD? - Explained
- How to Prevent Ransomware in 2018 - 10 Steps
- 5 Best Anti Ransomware Software Free
- How to Fix: Computer / Network Infected with Ransomware (10 Steps)
- How to Fix: Your Computer is Infected, Call This Number (Scam)
- Scammed by Informatico Experts? Here's What to Do
- Scammed by Smart PC Experts? Here's What to Do
- Scammed by Right PC Experts? Here's What to Do
- Scammed by PC / Web Network Experts? Here's What to Do
- How to Fix: Windows Update Won't Update
- Explained: Do I need a VPN? Are VPNs Safe for Online Banking?
- Explained: VPN vs Proxy; What's the Difference?
- Explained: Difference Between VPN Server and VPN (Service)
- Forgot Password? How to: Reset Any Password: Windows Vista, 7, 8, 10
- How to: Use a Firewall to Block Full Screen Ads on Android
- Explained: Absolute Best way to Limit Data on Android
- Explained: Difference Between Dark Web, Deep Net, Darknet and More
- Explained: If I Reset Windows 10 will it Remove Malware?
![](/graphics/dennisfaas.jpg)
My name is Dennis Faas and I am a senior systems administrator and IT technical analyst specializing in cyber crimes (sextortion / blackmail / tech support scams) with over 20 years experience; I also run this website! If you need technical assistance , I can help. Click here to email me now; optionally, you can review my resume here. You can also read how I can fix your computer over the Internet (also includes user reviews).
We are BBB Accredited
![](https://www.infopackets.com/graphics/bbb.png)
We are BBB accredited (A+ rating), celebrating 21 years of excellence! Click to view our rating on the BBB.