Apple security alert: Warning issued for iPhones, Macs and Apple Watch

Apple security alert
(Image credit: Shutterstock)

Apple has launched a series of security updates for Mac, the iPhone, iPad and Apple Watch, all to address the same vulnerability — and the flaw is apparently serious enough that Apple will warn you to install the updates as soon as possible.

iOS and iPadOS 14.4.1, watchOS 7.3.2 and macOS Big Sur 11.2.3 should all be available to download now. Once downloaded, you may be notified that your platform’s respective update is “important” and is “recommended for all users.” It might not be iOS 14.5, but you should still update as soon as you can.

While the updates themselves don’t specify what the issue is, the Apple support site — and the security bulletins for each update — clarify that the patches address a memory corruption bug in WebKit. This is the open-source browser engine behind Safari, so whether you have an iPhone 12 or Apple Watch Series 6, most Apple devices are going to be vulnerable to it.

As Apple put it in the security bulletins, “processing maliciously crafted web content” — visiting a malicious site, essentially — can trigger the bug and allow attackers to run malware on your device.

The bug was discovered by security researchers from Microsoft and Google, apparently fast enough that there are no recorded incidents of the vulnerability being exploited yet. That’s in contrast to a previously discovered pair of WebKit bugs that may have been actively exploited before January’s iOS 14.4 and iPadOS 14.4 security update.

Still, if you have a potentially affected device you should probably follow Apple’s advice and install the fix once it’s downloaded. If your iOS device hasn’t downloaded 14.4.1 yet, you can check for updates by opening the Settings menu and selecting General followed by Software Update.

On macOS Big Sur, you can open the System Preferences menu and select Software Update to do the same. Mac owners still using macOS Catalina or Mojave can alternatively update Safari to the new 14.0.3 version, which also includes a fix for the WebKit memory bug.

TOPICS
James Archer

James is currently Hardware Editor at Rock Paper Shotgun, but before that was Audio Editor at Tom’s Guide, where he covered headphones, speakers, soundbars and anything else that intentionally makes noise. A PC enthusiast, he also wrote computing and gaming news for TG, usually relating to how hard it is to find graphics card stock.

Read more
iPhone 16 Pro shown held in hand
Apple just patched its first zero-day flaw of the year — update your iPhone and Mac right now
Apple iPhone 16 Plus Review.
Apple just released an emergency security update for a flaw used in an ‘extremely sophisticated attack’ — update your devices right now
Apple iPhone 16 held in the hand.
iOS 18.3.1 — update your iPhone right now to fix critical zero-day vulnerability
MacBook Pro 16-inch 2021 sitting on a patio table
Critical macOS flaw puts your data and cameras at risk — update right now
Windows
240 million Windows 10 users are vulnerable to six different hacker exploits — protect yourself now
MacBook Pro 2021 (16-inch) on a patio table
Macs under attack from dangerous malware targeting digital wallets and Apple’s Notes app — how to stay safe
Latest in Smartwatches
Apple Watch SE (2022) shown on wrist
Apple Watch SE 3 reportedly in ’serious jeopardy’ — here’s why
Apple Watch Series 10
Future Apple Watch models could get a surprising new feature — what we know
The coolest things the Apple Watch can do
A folding Apple Watch could follow the iPhone Flip — here’s what we know
Atari 2600 My Play Watch
It's not just Pebble — Atari is back with a watch that lets you play retro games on your wrist
Pebble Core 2 Duo and Core Time 2 smartwatches
Pebble is back with two new smartwatches starting at $149 — how to preorder
Garmin Fenix 8 Sleep
New data reveals the average Garmin sleep score — do you sleep better or worse than most people?
Latest in News
Surface Laptop 7 from the front
Amazon just gave Surface Laptop 7 a 'frequently returned' label — here's what's going on
23andME box
23andMe has declared bankruptcy — here's how to delete your data now
half-life alyx
Latest Half-Life 3 rumors point to a 2025 release — and maybe pigs will fly
NFL Sunday Ticket logo for YouTube
NFL Sunday Ticket 2025 pricing revealed — and it's bad news
Ben Mendelsohn in Andor season 2
'Welcome to the Rebellion' — new ‘Andor’ season 2 trailer teases a darker edge
Russian flag with padlock smashing through glass
47 VPNs could be axed from Google Play Store following Russian demands