Advertisement

Apple notifies users of security flaw that could give hacker ‘full admin access’

Click to play video: 'Apple AirTags being used in luggage to avoid lost bags'
Apple AirTags being used in luggage to avoid lost bags
From flight delays to cancellations, travel has become somewhat of a nightmare. The latest challenge appears to be lost luggage. As Caryn Lieberman explains, one small accessory may make a big difference for travellers – Jul 7, 2022

Apple disclosed serious security vulnerabilities for iPhones, iPads and Macs that could potentially allow attackers to take complete control of these devices.

Apple released two security reports about the issue on Wednesday, although they didn’t receive wide attention outside of tech publications.

Read more: Apple TV series setting the stage for downtown London, Ont. shoot

Read next: Rent control: What tenants should know as rental prices surge across Canada  

Apple’s explanation of the vulnerability means a hacker could get “full admin access” to the device. That would allow intruders to impersonate the device’s owner and subsequently run any software in their name, said Rachel Tobac, CEO of SocialProof Security.

Security experts have advised users to update affected devices _ the iPhone6S and later models; several models of the iPad, including the 5th generation and later, all iPad Pro models and the iPad Air 2; and Mac computers running MacOS Monterey. The flaw also affects some iPod models.

Story continues below advertisement

Apple did not say in the reports how, where or by whom the vulnerabilities were discovered. In all cases, it cited an anonymous researcher.

Commercial spyware companies such as Israel’s NSO Group are known for identifying and taking advantage of such flaws, exploiting them in malware that surreptitiously infects targets’ smartphones, siphons their contents and surveils the targets in real time.

Click to play video: 'Apple announces iPhone update to add edit and undo options to iMessage'
Apple announces iPhone update to add edit and undo options to iMessage

NSO Group has been blacklisted by the U.S. Commerce Department. Its spyware is known to have been used in Europe, the Middle East, Africa and Latin America against journalists, dissidents and human rights activists.

Security researcher Will Strafach said he had seen no technical analysis of the vulnerabilities that Apple has just patched. The company has previously acknowledged similarly serious flaws and, in what Strafach estimated to be perhaps a dozen occasions, has noted that it was aware of reports that such security holes had being exploited.

Advertisement

Sponsored content