iOS bug: iPhone users urged to update after Apple fixes huge password vulnerability

The bug could let hackers steal your passwords and secretly run software

Apple employees take orders for the new iPhone 6S at the Apple Retail in Palo Alto, California September 25, 2015
Apple employees take orders for the new iPhone 6S at the Apple Retail in Palo Alto, California September 25, 2015

If you haven’t just updated your phone, it might be in huge danger.

A new update fixes security holes that would allow hackers to grab passwords and other important information with just one infected iMessage.

All hackers would have to do is to send an infected image to a phone, which will automatically open up it as soon as it is received. Once that file is received, hackers get the ability to run malicious code on that device – letting them run programs or hoover up passwords.

The security bug is present in every version of iOS and macOS apart from the very newest ones – iOS 9.3.3 and El Capital 10.11.6. Those updates were released this week and so Apple advises

The bug has only just been made public after being discovered by Tyler Bohan, a researcher who works for Cisco’s security unit. But it was shared with Apple ahead of the publication, so that it could be fixed without notifying hackers that it could be used.

Introducing iOS 10

It’s also possible to keep the phones from being infected by turning off iMessage and disabling MMS messaging, meaning that there’ll be no way to send over image files through texts, and ensuring that no questionable images are opened over email. Though there are no known problems with the latest updates, that will help keep devices safe until they are upgraded to the latest software.

Though Apple devices get updated far more reliably than Android ones – new releases for which tend to get held back by networks and phone manufacturers – there are still thought to be tens of millions of phones that haven’t even been updated to iOS 9, the last major release that came out in September last year.

Register for free to continue reading

Registration is a free and easy way to support our truly independent journalism

By registering, you will also enjoy limited access to Premium articles, exclusive newsletters, commenting, and virtual events with our leading journalists

Please enter a valid email
Please enter a valid email
Must be at least 6 characters, include an upper and lower case character and a number
Must be at least 6 characters, include an upper and lower case character and a number
Must be at least 6 characters, include an upper and lower case character and a number
Please enter your first name
Special characters aren’t allowed
Please enter a name between 1 and 40 characters
Please enter your last name
Special characters aren’t allowed
Please enter a name between 1 and 40 characters
You must be over 18 years old to register
You must be over 18 years old to register
Opt-out-policy
You can opt-out at any time by signing in to your account to manage your preferences. Each email has a link to unsubscribe.

By clicking ‘Create my account’ you confirm that your data has been entered correctly and you have read and agree to our Terms of use, Cookie policy and Privacy notice.

This site is protected by reCAPTCHA and the Google Privacy policy and Terms of service apply.

Already have an account? sign in

By clicking ‘Register’ you confirm that your data has been entered correctly and you have read and agree to our Terms of use, Cookie policy and Privacy notice.

This site is protected by reCAPTCHA and the Google Privacy policy and Terms of service apply.

Register for free to continue reading

Registration is a free and easy way to support our truly independent journalism

By registering, you will also enjoy limited access to Premium articles, exclusive newsletters, commenting, and virtual events with our leading journalists

Already have an account? sign in

By clicking ‘Register’ you confirm that your data has been entered correctly and you have read and agree to our Terms of use, Cookie policy and Privacy notice.

This site is protected by reCAPTCHA and the Google Privacy policy and Terms of service apply.

Join our new commenting forum

Join thought-provoking conversations, follow other Independent readers and see their replies

Comments

Thank you for registering

Please refresh the page or navigate to another page on the site to be automatically logged inPlease refresh your browser to be logged in