Without prior notice and on the eve of iOS 17, Apple has released a series of updates for almost all of its devices. These security updates address vulnerabilities that could be exploited to compromise the devices, and therefore, it is recommended to install them as soon as possible. We’re talking about iOS 16.6.1, iPadOS 16.6.1, watchOS 9.6.2, and macOS 13.5.2, which are now available for our iPhone, iPad, Apple Watch, and Mac.
What is fixed in these updates?
The main fix in these updates, as reported by TechCrunch, addresses a vulnerability that was part of an exploit chain called “BLASTPASS,” which Pegasus could use to compromise a device. This was a “zero-click” exploit that could allow attackers to send a malicious PassKit image (for the Wallet app) through Messages to target the device without any interaction from the victim. Fortunately, this vulnerability is completely eliminated after the update.
How to install these essential updates
On our iPhone and iPad, you can find the iOS 16.6.1 and iPadOS 16.6.1 update in Settings > General > Software Update. For the Apple Watch, you can install the watchOS 9.6.2 update through the Watch app on your iPhone, under General > Software Update, or directly on the watch in the Settings app under General > Software Update.
On the Mac, the steps are very similar. To install macOS 13.5.2, you just need to go to System Preferences from the Apple menu, then click on General and in Software Update, you will find the Download and Install button.
Given the nature of these vulnerabilities, it is advisable for all users to install the updates as soon as possible. Additionally, it’s worth noting that for individuals who could be targets of highly targeted Pegasus attacks, the Lockdown mode is an excellent ally. This mode, even without this update, already prevents the use of this exploit on its own.
Updates like these remind us of the importance of security and the privacy of our data, as well as the significance of the regular updates that Apple releases. Keeping our devices up to date at all times is crucial to ensure that our data remains our own.