Apple Releases Emergency iOS Update To Patch Vulnerabilities Used To Deploy Spyware And Steal Personal Data

Apple released several small, incremental updates to the iOS and iPadOS updates. The updates for the iPhone and iPad are intended to patch a few concerning security vulnerabilities.

Apple is urging all iPhone and iPad users to immediately seek, download, and install the latest updates it has sent out for these devices. The update includes patches for several zero-day vulnerabilities for iOS that have already been "actively exploited in the wild".

Apple Strongly Urges iPhone And iPad Users To Install iOS and iPadOS 16.5.1

iOS 16.5.1 is now available to download for iPhone 8 or newer smartphones. It includes a fix for a major security flaw that allowed hackers to access all of the personal data stored on the victim's iPhone.

The highly concerning security flaw was first discovered by the Kaspersky antivirus research team. Apparently, the malware is quite effective and does not need user intervention or action to execute on the victim's devices.

Incidentally, this particular vulnerability was first primarily observed on iPhones in Russia. iPhone devices of thousands of Russian government officials have been reportedly infected by the spyware identified as "TirangleDB".

Russia's FSB intelligence and security agency had recently claimed that Apple iPhone devices, vulnerable since 2019, were used to target Russian officials. The officials even dubbed the exploitation of the flaw as "Operation Triangulation".

How Is The Security Flaw Exploited And How To Stay Protected From TriangleDB Attack?

Hackers have been sending messages via iPhone's iMessage platform, which contain malicious attachments that infect and grant access to their target's iPhones. The security flaw lies at the kernel level. If successfully exploited, it gave hackers unlimited access to the iPhone and all its content, including the ability to execute arbitrary code.

Apple has been aware of the flaw and has mentioned that it has observed attacks on iPhone devices running versions of iOS 15.7 or earlier. This means iPhone and iPad users who keep their devices updated regularly, shouldn't be concerned.

Regardless of the operating system version, all iPhone and iPad users must download and update the iOS and iPadOS 16.5.1. To access, download, and install the update on an iPhone, head over to Settings > General > Software Update.