EXECUTIVE SUMMARY:
Apple recently published fixes for a series of vulnerabilities in the iOS and iPadOS 14.5 App Tracking Transparency feature. In theory, both bugs could permit nefarious persons to execute code from a remote location. As a result, device takeover could occur. Any owner of these device types is encouraged to update their devices as soon as possible.
iPhone exploits in the wild?
At least one of these vulnerabilities may have been exploited in the wild. According to reports, Apple is aware that this bug may have seen active exploitation.
What were these two bugs?
- A bug that could corrupt the memory within the device.
- An integer overflow issue.
A third bug, with the potential to permit arbitrary code execution in older devices, was also resolved.
How many bugs this year?
Google’s Project Zero maintains a list of major bugs that have been identified. This year, more than 21 notable zero-day vulnerabilities have been found. At least seven of these purportedly affect Apple’s products. The common theme among the Apple bugs? A focus on Webkit.
Rumors around a six-month old bug that Apple hasn’t fixed?
According to ZDNet, some iPhone owners aren’t receiving intended phone notifications. In addition, some Apple Watch owners are also experiencing notification and iPhone connectivity issues. “Those owning just an iPhone are left in the dark when a call or message comes in”. Assorted quick fixes have been found. These range from rebooting the iPhone to turning off Bluetooth to unpairing and repairing the Apple Watch.
Other Apple news:
The tech giant recently announced plans to release a power-packed foldable phone in the near future. Analysts expect that the phone will be widely available by 2032. The configuration will enable users to leverage the features of an iPhone, but will retain the 7.9 inch display of an iPad mini.
Foldable phones already exist on the market. However, high price tags mean that only a small subset of the population purchases them.
Apple’s foldable phone is expected to “blur the product segmentations between smartphones, tablets, and laptops.” For more on Apple’s foldable phones, visit CNBC.
For more on remote location device takeover and Apple vulnerabilities, visit Forbes.
