Update your iPhone NOW: Apple is releasing an urgent software update – here’s how to install it on your smartphone

Science
By William

>

  • Embarrassing bug comes four days before new iPhone announcement
  • Apple had to roll out a software update at the last minute. Here’s how to get it

By Jonathan Chadwick for Mailonline

Published: | Updated:

Just six weeks after Apple released its last software update, Apple urgently had to release a follow-up.

iOS 16.6.1, released worldwide on Thursday, fixes a security bug that makes iPhones vulnerable to “spyware”: software that steals information from a device.

Apple was alerted to the bug by the University of Toronto’s Citizen Lab, which said it is “capable of compromising iPhones without any interaction from the victim.”

In a web message about iOS 16.6.1, Apple confirmed that the new update “provides important security fixes” without providing additional details, though it did thank Citizen Lab experts “for their help.”

Apple will announce a brand new mobile operating system called iOS 17 alongside the new iPhone 15 next week.

Apple confirmed that the update “provides important security fixes” but would not confirm further details

This is how you install the ‘urgent’ iPhone update

  1. Go to the Settings app on your iPhone (indicated by the cog or cog icon)
  2. Select ‘General’ followed by ‘Software Update’
  3. Tap ‘Download and Install’

Unfortunately, the bug is too dangerous to wait for the release of iOS 17 (expected later this month), so Apple has had to quickly roll out this latest version of 16.6.

To install the urgent update, users simply need to go to their iPhone settings and select ‘General’ followed by ‘Software Update’.

A facts window about iOS 16.6.1 should appear with the message: “This update provides important security fixes and is recommended for all users.”

Tapping ‘Download and Install’ will start the update. This may take a few minutes.

Apple said the update is also available for iPadOS, the operating system that runs on its iPads.

The tech giant said: “To protect our customers, Apple does not disclose, discuss, or confirm any security issues until an investigation has occurred and patches or releases are available.”

Apple is already expected to announce a brand new mobile operating system next week, called iOS 17, along with the new iPhone 15. But it had to quickly roll out this latest update to its current system iOS 16 due to the potential dangers of the bug

Apple is already expected to announce a brand new mobile operating system next week, called iOS 17, along with the new iPhone 15. But it had to quickly roll out this latest update to its current system iOS 16 due to the potential dangers of the bug

However, Citizen Lab provides many more details about the vulnerability, which is used by cybercriminals to deliver the infamous ‘Pegasus’ spyware, created by Israeli company NSO Group.

In a blog postCitizen Lab said it uses an ‘exploit chain’ method – a method that involves multiple vulnerabilities to compromise the victim step by step – but without any interaction from the victim (“zero click”).

β€œCitizen Lab immediately disclosed our findings to Apple and assisted in their investigation,” the research group said.

‘We expect to publish a more detailed discussion on the exploitation chain in the future.

‘We urge everyone to update their devices immediately.

“This latest discovery shows once again that civil society is being targeted by highly sophisticated exploits and for-hire spyware.”

Citizen Lab also advised any unnamed iPhone user “who may be at increased risk because of who they are or what they do” to enable Lockdown Mode, Apple’s security feature first released last year.

Citizen Lab provides many more details about the vulnerability, which is used by cybercriminals to deliver the infamous 'Pegasus' spyware, created by Israeli company NSO Group (file photo)

Citizen Lab provides many more details about the vulnerability, which is used by cybercriminals to deliver the infamous ‘Pegasus’ spyware, created by Israeli company NSO Group (file photo)

Citizen Lab also advised any iPhone user

Citizen Lab also advised any iPhone user “who may be at increased risk because of who they are or what they do” to enable Lockdown Mode, Apple’s security feature first released last year.

When a device is in lock mode, apps, websites, and features are restricted for security reasons and others are completely disabled.

For example, most types of message attachments in the Messages app, except images, are blocked, and other features, such as link previews, are disabled.

Lockdown Mode is an optional protection for users who face “severe, targeted threats to their digital security,” such as journalists and activists, Apple said.

PEGASUS: HOW POWERFUL SPYWARE WORKS TO HACK JOURNALISTS

Pegasus is a powerful piece of ‘malware’ – malicious computer software – developed by the Israeli security company NSO Group.

This specific form of malware is known as ‘spyware’, which means it is designed to collect data from an infected device without the owner’s knowledge and forward it to a third party.

While most spyware is limited in scope – only collecting data from specific parts of an infected system – Pegasus appears to be much more powerful, giving the controller virtually unlimited access and control over an infected device.

This includes access to contact lists, emails and text messages, along with stored photos, videos and audio files.

Pegasus can also be used to take over the phone’s camera or microphone to record video and audio, and access GPS data to monitor where the phone’s owner has been.

And it can also be used to record new incoming or outgoing phone calls.

Early versions of the virus-infected phones used crude ‘phishing’ attacks where users were tricked into downloading the virus to their own phones by clicking a malicious link sent via text message or email.

But researchers say the software has become much more sophisticated, exploiting vulnerabilities in common phone apps to launch so-called “zero-click” attacks that can infect devices without the user doing anything.

For example, WhatsApp revealed in 2019 that 1,400 people had been infected by software from NSO Group using a so-called ‘zero day’ flaw – a previously unknown flaw – in the app’s calling function.

Users became infected when a call was made to their phone via WhatsApp, regardless of whether they answered the call or not.

More recently, NSO began exploiting vulnerabilities in Apple’s iMessage software, giving it backdoor access to hundreds of millions of iPhones.

Apple says it continually updates its software to prevent such attacks, although human rights group Amnesty says it has discovered successful attacks on even the most up-to-date iOS systems.

NSO Group says Pegasus can also be installed on devices using wireless transceivers located near the target, or booted directly on the device if it is stolen first.

You might also like More from author