Owners of Apple devices have been urged to update them as quickly as possible to protect against a significant security flaw.
Apple has pushed out updates for most of its devices – the iPhone, Apple Watch, iPad and Mac – that fix the issue and prevent it being exploited in the future.
If it is not fixed, thre is a danger that hackers could take over those device and run their own code, potentially exposing the personal files that are stored on it.
The problem is specifically related to WebKit, the browser engine that powers Safari. Since that application comes installed on all of the affected devices, they each need to be updated to be secure.
Apple itself gave little information on the fixes in the update and sad only that it “provides important security updates and is recommended for all users”.
It refers users to its security pages for more information, but those pages note that Apple gives little information on security problems for strategic reaons.
“For our customers’ protection, Apple doesn’t disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available, that page reads.
But it does specify that the bug targets “maliciously crafted web content [that] may lead to arbitrary code execution”.
It also credits researchers from other technology companies – Clément Lecigne of Google’s Threat Analysis Group and Alison Huffman of Microsoft Browser Vulnerability Research – for having found the issue.
There is no indication that it has yet been exploited.
As ever, the update can be downloaded manually by heading into the Settings app, clicking “General”, and choosing the software update option. Clicking on that will bring up the option to download and install it.
If users do not manually install the update, it will soon arrive on any phones that have automatic updates set up. Users will be asked if they want the update to installer may find that it has done so itself overnight.
