Apple has released urgent updates for iOS and iPadOS, addressing 29 security vulnerabilities—many of which affect WebKit, the engine behind Safari and other apps that display web content. These flaws could allow attackers to access sensitive data, spoof trusted websites, or bypass privacy indicators.
Do You Need Help?
XEye Security offers you the ultimate proactive and cost-effective approach and solutions to combating all types of cyber threats, ensuring compliance, and implementing robust security measures.
📱 Affected Devices
These updates apply to:
- iPhone XS and later
- iPad Pro 13-inch
- iPad Pro 12.9-inch (3rd gen and later)
- iPad Pro 11-inch (1st gen and later)
- iPad Air (3rd gen and later)
- iPad (7th gen and later)
- iPad mini (5th gen and later)
To update: Go to Settings → General → Software Update Ensure you’re running iOS 18.6 or iPadOS 18.6. Enable Automatic Updates to stay protected.
🔍 Key Vulnerabilities Fixed
- Passcode Disclosure via VoiceOver A logic flaw could cause VoiceOver to read your passcode aloud.
- Missing Privacy Indicators Apps may access your microphone or camera without showing the usual privacy alerts.
- Sensitive Data Exposure via Malicious Websites Crafted websites could leak browser-handled data like cookies, tokens, and browsing history.
- Address Bar Spoofing Attackers could make malicious sites appear legitimate by spoofing the URL bar.
🖥️ Other Apple Updates
Security patches were also released for:
- macOS Sequoia 15.6
- macOS Sonoma 14.7.7
- macOS Ventura 13.7.7
- watchOS 11.6
- tvOS 18.6
⚠️ Why This Matters
These vulnerabilities pose real risks—from privacy breaches to phishing attacks. If you’re using any of the affected devices, updating immediately is essential.
✅ Stay Secure with XEye
If you’re unsure whether your device is safe or want expert help analyzing suspicious behavior, XEye Security offers:
- Email and device forensics
- Privacy audits
- Threat detection and response
📩 Join our Cybersecurity Awareness Masterclass on August 13 from XEye Academy by clicking here to learn how to protect yourself from real-world threats—no technical background needed.
