Apple has always been serious about its users’ security, so the company releases software updates from time to time. Recently, the company released an important security update specifically for older iPhone models.
Security experts have discovered a dangerous vulnerability which is being called Coronavirus exploit. In this article, we’ll discuss this vulnerability in detail and about the security updates needed to protect against it.
Apple Releases New Software Updates
Apple recently released some special security updates for older iPhone devices. These include iOS 15.8.7, iOS 16.7.15, iPadOS 15.8.7, and iPadOS 16.7.15. These updates are for devices that cannot upgrade to the latest iOS version.
Apple says that these updates include important security fixes. The company wants that all the users who are using old devices should also get full protection.
What is Corona Exploit?
According to security researchers, Corona is an advanced hacking framework that specifically targets iPhone devices. This exploit can bypass the device’s security system by using a combination of multiple vulnerabilities. Researchers say it uses 23 different vulnerabilities and creates five separate exploit chains. This exploit specifically affects versions from iOS 13 to iOS 17.2.1. This means it has become very important for every user to update their iPhone.
Corona Exploit Working Process
The working process of the Corona exploit is something like this. First, the user accidentally opens a malicious website. That website contains a hidden code that analyzes the device. Then it finds out the details of the device, such as the iPhone model and which iOS version, etc.
After that, the attacker launches an exploit chain suitable for that device. This exploit uses vulnerabilities in the WebKit engine and system, allowing an attacker to execute malicious code. Once the exploit is successful, the hacker can gain deeper access to the device.
What are Kernel and WebKit Vulnerabilities?
Apple has fixed two types of vulnerabilities in the latest update.
- Kernel Vulnerability
The kernel is a core part of any operating system. If a hacker gains access to the kernel, they can gain almost complete control over the system. Apple stated that it was possible to execute this code with the kernel as well, but it has now been fixed.
- WebKit Vulnerability
WebKit is the engine used to render webpages in the Safari browser and many apps. If a WebKit vulnerability is present, opening even a single malicious webpage can compromise the device. The company has fixed use-after-free vulnerabilities, memory corruption bugs, and type confusion issues.
Why is the Corona Exploit Dangerous?
The most dangerous part of the Corona exploit is that it combines multiple vulnerabilities. Researchers have observed that it has so far targeted thousands of devices. It is used in both cybercrime and surveillance operations.
It could also target crypto wallets or other financial data. It can attack and gain control over the device, access photos and files, install malware, steal private data or passwords, and monitor all the user’s activities. That’s why security experts have asked users of older iPhone models to strictly install the new update.
Which iPhone Models are Affected?
Currently, this update has been released mainly for older iPhone models that do not support the latest iOS versions. Some of these devices include iPhone 6s, iPhone 7, iPhone SE (1st generation), iPhone 8, iPhone 8 Plus and iPhone X. Apart from iPhones, some older iPad models were also affected for which iPadOS updates have been released. Security patches have also been released to keep these devices secure.
Role of the Google Threat Intelligence Group
The Google Threat Intelligence Group is contributing to the discovery of this vulnerability in older iPhones. Researchers discovered that the coronavirus exploit could easily hack iPhone devices by chaining multiple vulnerabilities. Following this discovery, they alerted Apple, which quickly released security patches. This collaboration is common in the tech industry, where companies discover bugs and share security research with each other.
Why are security updates important?
Security updates are important not only for iPhones but for all Android phones. There are users who ignore software updates. But these updates have many benefits. Security patches fix vulnerabilities. Malware protection means protection from hackers. Bugs are fixed due to which device performs smoother. Your personal data remains secure. That’s why security experts always recommend installing any new updates on your phone immediately.
What should iPhone users do?
If you have an older iPhone, the first step is to install the latest update. To do this, simply go to your iPhone’s settings, tap on the General option, then click on Software Update, and download and install the latest update. Once the update is complete, your phone will automatically restart, and the new security patches will be applied automatically.
How to avoid security threats in the future?
These days, cyber threats are increasing rapidly. It’s important to follow some basic precautions to protect yourself. If you follow these basic precautions on your phone, your device will remain secure for a long time.
For this, always install the latest software updates. Avoid clicking on suspicious links or unknown websites. Avoid installing unknown apps. Always use Face ID and a strong passcode.
Conclusion
In this article, you’ve learned about Apple’s latest iOS update. You should know that this is an important security step from Apple that protects older iPhone devices from dangerous coronavirus exploits.
If you have an older iPhone model, install this update quickly. Regular updates provided by all companies are important not only for new features but also for security.