Apple released iOS 18.6.2, macOS Sequoia 15.6.2 and iPadOS 18.6.2 on Wednesday, warning that the updates close security vulnerabilities already exploited by hackers.
While the patches include no new features, they are nevertheless highly recommended for iPhone, Mac and iPad users.
iOS 18.6.2, macOS Sequoia 15.6.2 and iPadOS 18.6.2 fix security threats
Hackers are a constant threat, and Apple does everything it can to make its operating systems safe. When new security problems arise, Apple issues patches for its operating systems to close them. That’s the whole point of iOS 18.6.2, macOS Sequoia 15.6.2 and iPadOS 18.6.2.
A warning from Apple says the updates deal with a security vulnerability in ImageIO. A specially produced image can corrupt the device’s memory, opening it up to exploitation.
Virtually every OS update from Apple includes security patches, but these are usually for potential threats. Not this time. The iPhone-maker warns that, “Apple is aware of a report that this issue may have been exploited in an extremely sophisticated attack against specific targeted individuals.”
“Apple has indicated that this vulnerability has been exploited in sophisticated, targeted attacks, which typically focus on individuals with highly valued access or contacts, such as journalists, lawyers, activists, and government officials,” said Adam Boynton, senior security strategy manager at the security company Jamf. “While Apple has not confirmed whether this specific flaw was linked to spyware, similar vulnerabilities in ImageIO and WebKit have previously been used in Pegasus campaigns.”
A threat to crypto users
The vulnerability could prove devastating to cryptocurrency users who store their crypto wallet addresses, keys and/or recovery phrases as screenshots on their devices, according to The Street.
“While a crypto wallet address is like your digital bank account number for receiving crypto assets, a private key is a long string of characters used to secure and access your assets. A recovery phrase is an ultimate secret backup key that restores access to your wallet,” the publication wrote. “The wallet address should only be shared while receiving crypto. But one simply can’t afford to expose a private key and a recovery phrase because once a bad actor has access to them, your entire crypto holdings are gone.”
Removing the problem is easy: Just install the latest iPhone, Mac and iPad operating system updates.
How to install iOS 18.6.2, macOS Sequoia 15.6.2 and iPadOS 18.6.2 patches
Apple’s release note for the iOS update says simply, “This update provides important security fixes and is recommended for all users.”
The brevity of Apple’s comments indicates that iOS 18.6.2, macOS Sequoia 15.6.2 and iPadOS 18.6.2 contain no new features. They’re pure security patches.
iPhone and iPad users can install iOS 18.6.2 and iPadOS iOS 18.6.2 directly by opening the Settings app and going to General > Software Update. Alternatively, you can update your devices by connecting them to a Mac (or to a PC running iTunes).
To download the macOS Sequoia 15.6.2 update, go to the Apple menu > About This Mac. Then click Software Update. Alternatively, you can install the new version from the App Store. (Note: At the time of this writing, Apple had not yet updated the version of macOS in the App Store. But it should happen soon.)
