iOS 14.4 patch 3 dangerous security bugs, Apple recommends iPhone users should update immediately

Notably, the iOS 14.4 update that Apple just released patched up to 3 security holes, which are said to be "actively attacked by hackers", according to Techcrunch.

Specifically, on its support page, the tech giant said that the iOS 14.4 and iPadOS 14.4 updates patch three of the security holes that affect the iPhone and iPad 'may have been actively exploited'.

Details of the security hole were not mentioned much, and an Apple spokesperson also declined to comment beyond what was announced on the support page.

Apple says the iOS 14.4 and iPadOS 14.4 updates patch three of the security holes that affect the iPhone and iPad 'could have been actively exploited'. (Screenshots)

According to Techcrunch, the information did not mention "who is actively exploiting the vulnerability" or "who may have fallen victim". Apple also did not say whether the attack affected a small group of users or if it was a large-scale attack. The person who discovered the error and notified Apple is also anonymous.

Two of the bugs were found in WebKit, the browser engine that supports Safari and the Kernel kernel, the operating system's core program. Some hackers have exploited vulnerabilities successfully by linking vulnerabilities together, instead of just one.

It's not surprising that hackers first target vulnerabilities in a device's browser, as a way to break into the operating system, according to Techcrunch.

Apple said details will be announced soon, but did not mention when.

This is a rare move by Apple, which prides itself on the security of its devices, that its customers may be under "aggressive attack" by hackers.

Last month, Citizen Lab Internet Watchdog found that dozens of journalists had hacked iPhones through a previously unknown vulnerability to install spyware developed by NSO Group.

Although Apple has not released details on the incident, iPhone and iPad users should update to iOS 14.4 and iPadOS as soon as possible to fix these dangerous security vulnerabilities.

Samuel Daniel

Update 27 January 2021