Apple releases iOS 14.5.1, watchOS 7.4.1, and macOS Big Sur 11.3.1 with security fixes for flaws in WebKit that Apple says were being actively exploited
Alongside iOS 14.5.1 and watchOS 7.4.1, Apple today also released macOS Big Sur 11.3.1, which the company says “provides important security updates”.
MacRumors Eric Slivka
Related Coverage
- Apple security updates Apple Support
- View article Forbes
- Apple Releases Urgent Security Patches For Zero‑Day Bugs Under Active Attacks The Hacker News · Ravie Lakshmanan
- Apple pushes iOS 14.5.1 security update after WebKit flaws were found XDA Developers · Arol Wright
- Apple products hit by fourfecta of zero-day exploits - patch now! Naked Security · Paul Ducklin
- macOS Big Sur bug may have already been exploited by hackers — How to get Apple's security patch Laptop Mag · Sean Riley
- watchOS 7.4.1 released with fix for another WebKit security flaw iThinkDifferent · Imran Hussain
Discussion
-
@dangoodin001
Dan Goodin
on x
Apple reports two iOS zerodays that both allow attackers to remotely execute malicious code on fully-patched devices. Update to iOS 14.5.1. https://support.apple.com/... https://twitter.com/...
-
@pwnallthethings
@pwnallthethings
on x
Also free hot take: imo tech cos & TI folks keeping ITW exploit techniques TLP-protected indefinitely so platform sec folks and researchers can't model attacks and share systemic defenive techniques across platforms is prob a net negative for consumer security in the long run
-
@mikarv
Michael Veale
on x
Yet more actively exploited Apple zero days. Last wk was an emergency patch for MacOS that had been exploited all year, now more patches for almost all devices. Given the behemoth rarely says much re bugs, let alone their actual use, they are presumably scared. Update today. http…
-
@tapbot_paul
Paul Haddad
on x
Seriously 2.4 GB of “security updates” from a week ago? Does Apple have to re-sign every single executed/library in the OS for a security update? https://twitter.com/...
-
@kimzetter
Kim Zetter
on x
Maybe iOS needs a patch Tuesday going forward? https://twitter.com/...
-
@pwnallthethings
@pwnallthethings
on x
One thing that would be really neat and helpful for Apple to do with these updates for ITW exploits (which tbh would probably benefit them more than anyone else), is to be more proactive on explaining *which models* they saw active exploitation on.
-
@dangoodin001
Dan Goodin
on x
Also, I really wish Apple and other companies would stop hedging in advisories disclosing 0days. Language like “may be” isn't helpful and just makes the company look evasive.
-
@ryanaraine
Ryan Naraine
on x
Useless stat: Apple accounts for 22% of the 27 zero-days discovered in the wild so far in 2021.
-
@dsilverman
Dwight Silverman
on x
Fixes App Transparency Tracking bug. Also available for iPadOS. https://twitter.com/...
-
@zackwhittaker
Zack Whittaker
on x
Update to iOS 14.5.1 today. Apple says two vulnerabilities are being actively exploited. More: https://support.apple.com/... https://twitter.com/...
-
@macrumors
@macrumors
on x
Apple Releases macOS Big Sur 11.3.1 With Fixes for WebKit Security Issues https://www.macrumors.com/... by @eslivka https://twitter.com/...