Apple has released the iOS 16.5.1 update for compatible iPhone models, addressing significant security vulnerabilities and bugs. This update addresses crucial zero-day security threats that could enable an attacker to implant and operate spyware on an iPhone through iMessage, as identified by a security company. The update also rectifies an issue related to Apple's Lightning to USB 3 camera adapter accessory that prevented it from charging, which emerged with the previous update. Updates for iPadOS 16.5.1, macOS 13.4.1, and watchOS 9.5.2 have also been rolled out, offering further security and bug fixes.
The vulnerabilities in question are associated with the OS kernel and WebKit engine, which is the backbone of the Safari browser. These flaws made it possible for attackers to inject the 'Triangulation' spyware into an iPhone, as indicated by the security firm Kaspersky. This exploit could be triggered by sending an iMessage with a malicious attachment that persisted in the iPhone's RAM until a device reboot or 30 days had passed, necessitating a resending of the malicious attachment for reinfection.
Apple assures that these flaws are now rectified with the latest update. iPhone and iPad users can install iOS 16.5.1 or iOS 15.7.7, iPadOS 16.5.1 or iPadOS 15.7.7. Mac users can upgrade to macOS 13.4.1, macOS 12.6.7 or macOS 11.7.8, and Apple Watch users can update to watchOS 9.5.2 or watchOS 8.8.1 to safeguard against this vulnerability.
Along with the security fixes, the iOS 16.5.1 update also corrects a previous bug related to the Lightning to USB 3 camera adapter, reinstating its charging capability. Users can access the update by navigating to General > Software Update > Download and Install in the Settings app on their iPhone.