
Meanwhile, an iOS13 bug exposed contact details stored in iPhones without requiring a passcode or biometric identification - a flaw that the company did not publicly address until several months after it was first reported. Last year, Google researchers found several websites with code that allowed hackers to quietly infiltrate iPhones. The exploits were reported by "an anonymous researcher," according to the webpage.Īpple prides itself on device security but it's not immune to exploits. technology giant Apple has issued a series of security updates after independent researchers uncovered a vulnerability in its messaging service that allowed for spyware. Meanwhile, Kernel, an Apple developer framework, was also affected. "A remote attacker may be able to cause arbitrary code execution," the company said in the description notes. The company pushed out the security patches on Tuesday as part of its new iOS 14.4 software, which also includes fixes for keyboard lag and allows smaller QR codes to be read by the camera.Īpple said two security issues stem from its WebKit, an open source browser engine used by Safari and iOS browsers.

The company declined to comment further on any attacks. The issue is a link in an exploit chain, meaning a hacker would need to exploit further bugs for it to be fully executable.

On its support webpage, the company said three security flaws "may have been actively exploited." It did not reveal too many specifics about the bugs, noting "Apple does not disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available."
#Apple security update update#
Apple is urging iPhone and iPad users to promptly update their operating systems to fix security bugs that may have already been exploited by hackers.
