Update your iPhone NOW: Apple issues warning to download new iOS 16

Apple has issued a warning to users – update your iPhone with the latest iOS now.

The tech giant issued iOS 16.3.1 Monday to fix two security flaws, one that may have been actively exploited.

One of the issues is in Webkit, a Safari browser engine that allowed bad actors to execute an arbitrary code on an iPhone and Apple believes it has been done.

The second security flaw in Kernel could allow an attacker to take over privileges, but the tech giant is unaware this has been used.

The updated operating system is only available for the iPhone 8 and later models. 

Apple’s release notes show that the iOS 16.3.1 update includes multiple bug fixes, addressing issues with iCloud and Siri, along with more Crash Detection optimizations.

The flaw found in Webkit was detected by an anonymous researcher and the one if Kernel was spotted by Xinru Chi of Pangu Lab and Ned Williamson of Google Project Zero.

Apple also notes that The Citizen Lab at The University of Toronto’s Munk School also assisted with finding these security issues.

It is unclear how long the vulnerabilities have been plaguing devices, as Apple says it ‘doesn’t disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are available.’ 

The initial release of iOS 16.3 was in June, which allows users to call silently with Emergency SOS and provides improved two-factor security and advanced data protection.

Apple’s Emergency SOS service was upgraded to call silently make calls if you enable the function via a slider option (useful in situations where an attacker might be present).

It’ is an option you enable so that when you make an SOS call via the Emergency SOS service, the phone will not flash or make a countdown.

The Emergency SOS service has also been tweaked to reduce the chance of accidentally triggering it.

Apple notes that one of the flaws may have been used by attackers in the real world

The improved two-factor security allows users to secure their Apple ID and iCloud account with Security keys – a physical device that works as the second layer of two-factor authentication. 

Instead of getting a code from another logged-in Apple device, you generate one with the security key. 

And the advanced data protection enables end-to-end encryption for data in iCloud, including Messages, device backups and photos. 

To install the new iOS, users can go to the Settings App, click on ‘General’ and then ‘Software Update.’

Then tap ‘Install’ if the iOS 16.3.1 update is available to download, and you will be guided through steps to verify the decision and reboot the device.

The update can also be installed through a Mac or Windows computer with iTunes.

It is a good idea to back up the iPhone before installing iOS 16 to ensure all data is secure in iCloud if anything goes wrong while updating.

This can be done by going into the Settings app, clicking the device owner’s name at the top of the menu, then clicking ‘iCloud’ and ‘iCloud Backup.’

When ‘iCloud Backup’ is set to on, tapping ‘Back Up Now’ will guide you through the back-up process and enable you to restore the device’s data to a later date.