Important iOS Update - Do It Now!

29 Aug 2016 18:09:13

Tony Still

May I urge everyone using iOS 9 on their phone, pad etc to apply the iOS 9.3.5 update as soon as possible. You can access it from Settings->General->Software Update; Settings may not yet be badged to show that an update is available but it should be there if you go and look under Software Update.

It seems that a big player, possibly a national security agency from an unspecified nation, has been caught exploiting three previously unknown (ie "zero day") vulnerabilities in iOS. Our membership is probably not on their hit list (though I don't know what you all do in your spare time) but... details of the vulnerabilities are now in the public domain so a bunch of common criminals are likely to pick up on them. This is a problem for all of us.

If you are not yet on iOS 9, you are vulnerable. If you can, update. If you can't, redouble your efforts to avoid clicking on any unexpected links or visiting any dodgy web sites.

This is in no way an advert from my upcoming presentation at Bournemouth about malware ;-)

More info here.

Re: Important iOS Update - Do It Now!

30 Aug 2016 07:50:19

Trevor Hewson

Thanks Tony.

Re: Important iOS Update - Do It Now!

2 Sep 2016 10:51:01

Euan Williams

Yesterday afternoon Apple released updates (for the same malware) to secure macOS El Capitan, Yosemite and Safari. Update your system soonest!

From MacWorld.com:
"The exploits require the user to open a URL from an SMS message, which then executes remote binary files in the OS that dig into the kernel and allow unauthorised software to be installed—in iOS this effectively jailbreaks your device behind your back."

"According to Apple’s release notes, the Mac security updates released today will prevent applications from disclosing kernel memory and executing arbitrary code with kernel privileges. Safari’s patch fixes a memory corruption issue that would allow a malicious website to execute arbitrary code in the first place, namely the malware that’s trying to get into your kernel."

Re: Important iOS Update - Do It Now!

2 Sep 2016 13:41:36

Tony Still

Thanks Euan, you beat me to it.

Essentially the same problems, same reasons for updating quickly. Go to the Mac App Store (which may not yet be badged to show that an update is available), click on updates and expect to see the 2016 Security Update (for El Capitan and Yosemite).