Posted On 31 Aug 2021

All owners of Apple devices (Macs, iPads, and iPhones) need to be aware
that it is imperative that they should install the latest updates to their iOS immediately. Apple are providing a significant security update for all devices having found a zero-day flaw that has apparently already been exploited by hackers and could have been a means of planting malware on Apple devices.

As usual with Apple, there is little information available about the problem; this is standard company practice so that other malicious actors can’t garner details that could help them to further exploit the flaw.

A problem was reportedly identified by an unknown researcher which exploits the screen frame buffer code to action arbitrary code on devices that have kernel privileges. If the code implanted by hackers accesses privileges then it becomes the master controller of any device.

One security researcher is claiming to have discovered the flaw four months ago, although he admits that he did not report it to Apple because he was investigating ways in which it could be exploited. He alleges that it is a very basic vulnerability that is easy to find.

The company is advising users to update to the most recent versions of the operating systems available, which are 11.5.1 for macOS, 14.7.1 for iPadOS, and 14.7.1 for iOS. As Apple have stated that the security flaw is already being exploited “in the wild”, this should be done immediately in System Preferences for Macs or Settings > General > Software Update for iPhone/iPad.