iPhone users have been urged to update their smartphones immediately.
Apple has released its latest iOS 18.1.1 update, which contains ‘important security fixes’.
In a post on its security website, the tech giant says the update fixes two vulnerabilities which have already been ‘actively exploited’ by hackers.
According to security experts, these bugs could be used to remotely compromise a user’s device and even gain access to their online accounts.
While the security weaknesses have only been exploited on Mac so far, waiting too long could leave your iPhone vulnerable to being hacked.
Michael Covington, VP of strategy at cybersecurity firm Jamf, says: ‘The fixes provided by Apple introduce stronger checks to detect and prevent malicious activity, as well as improve how devices manage and track data during web browsing.
‘With attackers potentially exploiting both vulnerabilities, it is critical that users and mobile-first organisations apply the latest patches as soon as they are able.’
Here’s how you can keep your iPhone updated with the latest security patch.
Apple released the latest wave of updates to iOS and iPadOS yesterday evening.
This patch doesn’t bring any new content but does address two serious security issues identified by Google’s Threat Analysis Group.
The first is a bug in the ‘JavaScriptCore’, a framework used by the iPhone to run apps in web browsers.
Jake Moore, global cybersecurity advisor at ESET, told MailOnline: ‘The first issue patched in iOS 18.1.1 is a flaw that could result in remote takeover of a device if the user unknowingly interacts with maliciously crafted web content.
‘The JavaScriptCore vulnerability could allow attackers to remotely write code onto victims’ devices meaning they could redirect users to malicious websites that look genuine – or even gain access to your online accounts through stealing what’s called session tokens.’
The second is a flaw in the Webkit engine which is used as the basis of apps like Safari, Mail, and the App Store.
Mr Moore says: ‘If exploited, it could expose users to a type of attack that would allow an attacker to place malicious code into a trusted website or application.’
Worryingly, because of how Apple forces all browsers on its devices to use the same Webkit, this vulnerability could affect all browsers across the tech giant’s ecosystem, not just Safari.
However, Apple is staying tight-lipped about what exactly the patch changes to avoid giving anything away while people download the update.
In a statement, Apple says: ‘Apple is aware of a report that this issue may have been actively exploited on Intel-based Mac systems.’
This means that hackers have already been exploiting these weaknesses in the wild to break into some Mac devices – making it extremely important that you update your devices as soon as possible.
Apple’s iOS 18.1.1 is available for the Phone XS and later, iPad Pro 13-inch, iPad Pro 12.9-inch 3rd generation and later, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 7th generation and later and iPad mini 5th generation and later.
To update your iPhone or iPad, open the Settings app and navigate to the tab marked ‘General’.
From there, tap on ‘Software Update’ and wait a few seconds while your phone searches for new updates.
If iOS 18.1.1 is available it should be displayed on screen where you can tap ‘Install Now’ to begin.
If the option reads ‘Download and Install’ instead, tap it to download the update, enter your passcode, and then tap Install Now.
Alternatively, you can also set future updates to automatically install by going to Settings, General, Software Updates, and selecting the tab marked ‘Automatic Updates’.
Simply set iOS Updates to automatically install and download to ensure you always have the latest software.
On Mac, select the Apple menu from the corner of the screen and choose ‘System Settings’.
Click on the ‘General’ tab from the sidebar of the window that opens and then select ‘Software Update’ on the right.
If new software is available, you can select ‘Update’ or ‘Upgrade’ and enter your admin password to begin the installation.
Your computer might restart a few times in this process so don’t be alarmed if the screen goes blank at any point.
iOS 18.1 brought some of the first of Apple’s long-awaited Apple Intelligence features to the iPhone.
These include intelligent writing tools that can help you proofread, rewrite and summarize text anywhere that you can write words, such as Mail, Notes, Messages and other apps.
However, the update has also been plagued with issues such as Apple fans reporting poor battery life after downloading the software.
In another bizarre bug, some iPhone users also say that their devices are displaying old adult content at unwanted moments when they hold their phones a certain way.
This is despite their best efforts to clear their browser history, tabs and cookies, even after making sure to view risqué content in ‘incognito mode’ only.
While the glitch has been reported on previous software versions, its resurgence could be linked to issues with the iOS 18.1 update.
