•   
  •   
  •   

Technology Update to iOS 14.5.1 Right Now or Your iPhone Is a Sitting Duck for Hackers

22:26  04 may  2021
22:26  04 may  2021 Source:   gizmodo.com

iPhone 13: Release date, features, leaks, and rumors

  iPhone 13: Release date, features, leaks, and rumors We're still several months away from a formal announcement, but that doesn't stop leaks and rumors. Here's what we know."Sydney, Australia - November 4, 2011: Apple Computers logo and shoppers at the Apple Store in Sydney, Australia.

Apple has rushed out fixes to two major vulnerabilities in iOS and iPadOS 14.5, last month’s update that implemented its App Tracking Transparency feature. Both bugs could have allowed malicious parties to remotely execute code, possibly leading to the takeover of an affected device. That means you need to update your devices as soon as possible.

a laptop computer sitting on top of a table: The iPhone 12 and iPhone 12 Pro on sale in London in October 2020. © Photo: Ming Yeung (Getty Images) The iPhone 12 and iPhone 12 Pro on sale in London in October 2020.

According to Ars Technica, the 14.5.1 update on Monday mends two zero-day vulnerabilities (possibly already exploited in the wild) in Webkit, a rendering software that controls how web content is rendered in apps like Safari, the App Store, and others. Apple tagged the bugs as CVE-2021-30663 and CVE-2021-30665 in update notes; as Ars Technica explains, both issues were also noticed and patched in MacOS 11.3.1, released on Monday.

Your iPhone gets 2 new Siri voices with iOS 14.5. Here's how to try them out

  Your iPhone gets 2 new Siri voices with iOS 14.5. Here's how to try them out Tired of talking to the same ol' Siri? iOS 14.5 gives you more options for a total of four.Siri got a new look with iOS 14, and now it's getting new voices in iOS 14.5.

Both have an identical impact listed and note that Apple is aware that they had possibly been used in cyberattacks:

Processing maliciously crafted web content may lead to arbitrary code execution. Apple is aware of a report that this issue may have been actively exploited.

Apple addressed one of the two vulnerabilities, a “memory corruption issue,” “with improved state management,” after being flagged by researchers with Chinese firm Qihoo 360. In the other vulnerability, reported to Apple by an anonymous engineer, “An integer overflow was addressed with improved input validation.”

According to ThreatPost, Apple also fixed another issue (CVE-2021-30666) in the iOS 12.5.3 update for older devices that could have similarly led to “arbitrary code execution.” Google’s Project Zero, which keeps a running tally of major zero-day vulnerabilities, is up to 21 so far this year, seven of which affected Apple products—all but one of them having to do with Webkit. Microsoft also stands at eight zero-day vulnerabilities, while Google is up to five, and Adobe had one.

Apple rolls out iOS 14.5 public beta 3 with new Find My Items tab

  Apple rolls out iOS 14.5 public beta 3 with new Find My Items tab Less than 24 hours after seeding the latest iOS 14.5 beta to app developers, the third iOS 14.5 public beta is now available. The most significant change in iOS 14.5 beta 3 appears to be the addition of an "Items" tab in the Find My app which will allow users to track even more devices from an iPhone or iPad. It also suggests that we're even closer to the debut of the AirTags, which should be featured at Apple's spring event this month. Previous betas have revealed that iOS 14.

A separate element in 14.5.1 fixed a bug with the previously released App Tracking Transparency feature, which gives users greater control over which apps have access to which data and is the subject of an ongoing spat with Facebook. According to Ars Technica, a separate bug where the toggle button for the feature remains improperly greyed out in the Settings menu doesn’t appear to have been fixed yet.

“This update fixes an issue with App Tracking Transparency where some users who previously disabled Allow Apps to Request to Track in Settings may not receive prompts from apps after re-enabling it,” Apple wrote. “This update also provides important security updates and is recommended for all users.”

iOS 14.5 issues: Users are already reporting a bug .
Apple's iOS 14.5 brings lots of updated features to your iPhone, but the new release has at least one problem already.iOS 14.5 already has at least one bug that Apple needs to fix.

usr: 1
This is interesting!