With everyone’s mind now elsewhere, it’s easy to ignore the little iPhone prompt telling you it’s time to update. That would be a mistake.
On November 5, Apple introduced its latest series of updates for iOS. And comes with 117 new emojis which are some very important security patches. Specifically, the fixes included in iOS 14.2 address real security holes that are being actively exploited right now. That means someone is currently using them against iPhone owners.
We know this because Ben Hawkes, the technical lead of Google’s Project Zero bug hunting team, was kind enough to let the world know.
Hawkes wrote on Twitter: “Apple has fixed the three problems reported by Project Zero that are being actively exploited in the wild. “CVE-2020-27930 (RCE), CVE-2020-27950 (memory leak) and CVE-2020-27932 (kernel privilege escalation).”;
Apple has fixed three issues reported by Project Zero that are being actively exploited in the wild. CVE-2020-27930 (RCE), CVE-2020-27950 (memory leak) and CVE-2020-27932 (kernel privilege escalation). The security newsletter is available here: https://t.co/4OIReajIp6
– Ben Hawkes (@benhawkes) November 5, 2020
“RCE”, short for “remote code execution”, is especially notable because it means – like it sounds – that a hacker, criminal, or government can run code remotely on your phone . So bad.
Thankfully, there is a fix. As long as you have an iPhone 6s (or newer model), all you have to do is update your device. Another relatively good news is that, although we know that these exploits were actually used, according to Shane Huntley of the Google Threat Analysis Group, the attacks using them are irrelevant. to the US presidential election.
“Not related to any election goals,” Huntley wrote on Twitter.
The harvest target in the wild was similar to the other 0 days recently reported. Not relevant to any electoral targets.
– Shane Huntley (@ShaneHuntley) November 5, 2020
On Thursday, Apple also released the updates in the form of iPadOS 14.2, watchOS 7.1, watchOS 6.2.9, watchOS 5.3.9, macOS Catalina 10.15.17, tvOS 14.2, and iOS 12.4.9 (for older iPhones. iPhone 6s).
So go ahead and hit that update button and know that you’re getting a lot more than just new emojis. To be fair though, the emojis included with that are pretty amazing.