Urgent warning to iPhone users about a bug that could allow hackers to steal data… here’s how to protect yourself
Millions of iPhone users have been urged to update their devices to iOS 18 as soon as possible to fix a bug that could allow hackers to steal their data.
The vulnerability affects the Transparency, Consent and Control (TCC) subsystem in iOS, which is responsible for alerting users when an app tries to access sensitive data such as photos, GPS location, contacts and more.
But the bug causes this notification system to fail, potentially allowing third parties to steal “large” amounts of iCloud data through your apps.
This type of vulnerability is known as a ‘TCC bypass’.
“Alarmingly, this exploitation takes place without leaving any trace of the data being accessed, threatening user privacy and overall data security,” cybersecurity experts said.
The bug was discovered by cybersecurity firm Jamf Threat Labs, which discovered that it affects both iPhones and Macs.
Jamf experts reported their findings to Apple, and the tech company fixed the problem in iOS 18 and macOS 15 – the latest versions of the iPhone and Mac operating systems.
Jamf’s warning comes as Apple prepares to launch iOS 18.2, the latest update to its operating system.
Millions of iPhone users have been urged to update their devices as soon as possible to fix a bug that could allow hackers to steal their data
The first version of iOS 18 launched on September 16 on dozens of devices.
The update is available for all iPhones 11 through 15, as well as the second- and third-generation XR, XS, XS Max, and iPhone SEs.
To update your device, open the Settings app, tap General, then tap Software Update.
If iOS 18 is available, you’ll see it appear on the screen with an ‘Install Now’ button at the bottom. If you’d rather update your phone overnight, tap “Install Tonight.”
Once the download is complete, your iPhone will run iOS 18.
When an app attempts to access information stored in another app, TCC will typically send a push notification asking the iPhone user to authorize that access.
But this bug prevents TCC from providing this notification, and grants access without the iPhone user’s knowledge or consent.
In addition to photos, GPS location and contacts, this means apps can gain unauthorized access to files and folders, health data, the microphone or camera and more.
The iOS 18 software update should fix the problem and restore your data security
The iOS 18 software update should fix the problem and restore your data security.
But this bug highlights a broader security problem as attackers target data and intellectual property that can be accessed from multiple locations, Jamf experts said in a blog post.
This allows hackers to focus on compromising the weakest of the connected systems, they explained.
For example, services like iCloud – which can sync data between devices – allow attackers to access sensitive information through different access points, collecting valuable intellectual property and data, Jamf said.
This bug fix is a major change to the iOS 18 software, but that’s not all Apple has packed into this massive update.
The latest version of this operating system – iOS 18.2 – will bring the second wave of Apple Intelligence features: new tools and applications powered by artificial intelligence.
iOS 18.2 introduces Chat GPT integration, Siri upgrades, Genmoji, Image Playground and more.
The exact date and timing of the update’s release is still unknown. Previously, experts predicted that it could drop on Monday, but iPhone users are still waiting for the drop.
Apple tends to roll out updates on Mondays, so December 16 is again a strong potential release date.
In addition to the new features, patching vulnerabilities to protect your sensitive data is a very good reason to ensure your device has the latest operating system.
But many iPhone users who have already installed iOS 18 have complained about “complicated” changes to key apps and “annoying” issues.
The biggest issue concerns the redesigned Photos app, which “makes it easier to find and relive special moments,” Apple claimed. ‘The beautiful, simplified layout gives the library a uniform yet familiar image.’
But many users disagree, saying the app’s new interface is difficult to navigate and overwhelming to use.
“Every time Apple makes a major change to iOS we all immediately hate it and slowly come to the realization that it’s better, but I just don’t see it for the Photos app,” one X user wrote .
“Updated to iOS 18 last night and suddenly the photos app is ugly and complicated,” one user wrote on X.
Meanwhile, iPhone users have also found that installing iOS 18 has significantly reduced their battery life and introduced issues that cause apps to crash or make them difficult to open and log into.
It’s up to users to decide whether the new features and bug fixes in iOS 18 are worth these risks. But data security experts are urging the public to take this TCC bypass seriously and update devices.