{"id":137088,"date":"2021-09-14T16:42:25","date_gmt":"2021-09-14T20:42:25","guid":{"rendered":"http:\/\/www.bu.edu\/tech\/?p=137088"},"modified":"2021-09-28T20:37:46","modified_gmt":"2021-09-29T00:37:46","slug":"apple-releases-emergency-security-update-14-8","status":"publish","type":"post","link":"https:\/\/www.bu.edu\/tech\/2021\/09\/14\/apple-releases-emergency-security-update-14-8\/","title":{"rendered":"Update your Apple device now: emergency security update released"},"content":{"rendered":"

Apple has released an emergency security update to address a vulnerability in which spyware could be installed on an iPhone or other Apple device without ever having to click on a malicious link.<\/p>\n

The security patch was released on Monday September 13th, 2021 and a current activities alert (which provides up-to-date information about high-impact types of security activity affecting the community at large) <\/span>was issued through CISA via the National Cyber Awareness System<\/a>.<\/p>\n

\"\"<\/p>\n

What this means if you’re using an Apple device:<\/strong> As always recommended, update your software ASAP. If you’re not already using automatic updates, turn that setting on to get the latest software notifications as soon as they’re released.<\/p>\n

The spyware can then eavesdrop or steal data from your device. All of\u00a0Apple\u2019s operating systems, including those for iPads, Macs and Apple Watches, are vulnerable.<\/span><\/p>\n

For instructions on how to update your device and more information on the release visit the Apple Security Updates page: https:\/\/support.apple.com\/en-us\/HT201222\u00a0<\/a><\/p>\n

How they discovered the vulnerability:<\/strong> The security flaw was discovered by researchers at watchdog group\u00a0<\/span>Citizen Lab<\/a>, which found that the phone of a Saudi political activist had been infected with the Pegasus spyware via iMessage.<\/span><\/p>\n

The device had been hacked using a “zero-click” method that had allowed the spyware to live on the Saudi’s phone since February without detection, according to the\u00a0<\/span>Washington Post<\/a>. The same security flaw would enable the software to infect other Apple iPhones, watches and MacBooks, per the Post.<\/p>\n

Apple’s Statement<\/strong>: “After identifying the vulnerability used by this exploit for iMessage, Apple rapidly developed and deployed a fix in iOS 14.8 to protect our users,” said Ivan Krsti\u0107, head of Apple Security Engineering and Architecture, in a statement.<\/span><\/p>\n

For instructions on how to update your device and more information on the release visit thee Apple Security Updates page:<\/em> https:\/\/support.apple.com\/en-us\/HT201222\u00a0<\/a><\/p>\n