Apple releases iOS 16.5.1 and iOS 15.7.7, with Lightning to USB Camera Adapter fix and security updates for iMessage Spyware Flaw
Apple has rolled out critical security updates for iOS 15 and iOS 16, with iOS 16.5.1 and iOS 15.7.7 now available for download. The primary fix mentioned in the changelog is a Lightning to USB Camera Adapter fix, which had been causing charging issues for some users. Additionally, the changelog also mentions important security fixes in a separate document.
These fixes address a critical Messages security flaw that had been used to plant spyware on iPhones. This was a serious issue that could have allowed attackers to remotely take control of a device and access sensitive data. These security vulnerabilities were related to the "Triangulation" cyberattack discovered by the CEO of Kaspersky.
According to The Washington Post, this security flaw was used to compromise numerous devices in Russia, including those owned by Kaspersky's senior employees. The Triangulation attack functioned by sending an iMessage containing a harmful attachment. Surprisingly, the user did not even need to view or open the message for the spyware to be installed on their iPhone.
The spyware was then able to transmit private data such as microphone recordings, photos from instant messaging apps, geolocation information, and other files to remote servers. It could even extract passwords from Apple's keychains, as well as modify and export files.
Unlike previous iOS exploits, there are a few methods to protect oneself against this particular attack. Disabling iMessage would prevent infection, and simply restarting an infected iPhone would temporarily eliminate the spyware (until it is re-infected). Additionally, Apple offers an optional Lockdown Mode in iOS that can block the attack.
Apple claims that iOS 16 had other changes that protected it from this cyberattack, but it is still important for users to update to the latest version to ensure their devices are secure. It is recommended that all users update their devices as soon as possible to ensure they are protected from any potential security threats.
