Apple Releases iOS 12.5.5 To Patch The Vulnerabilities That Are Used By The NSO Group

Recently, Apple released iOS 14.8 to address the vulnerabilities that allowed The NSO Group to pwn iPhones with their Pegasus spyware. Now it appears that the same fixes have been brought down to iOS 12 users who could not update to iOS 13, 14 or iOS 15. Devices that are unable to update to iOS 13 or 14 include the iPhone 5s, ‌iPhone‌ 6, ‌iPhone‌ 6 Plus, iPod touch 6, original iPad Air, iPad mini 2, and ‌iPad mini‌ 3.

If you go to the Settings app, tapping on “General,” and selecting the “Software Update”, you should see that iOS 12.5.5 was released, and in Apple’s security information, it mentions three exploits that “may have been actively exploited” with one of them found by The University Of Toronto’s Citizen Lab. That’s the same people who have been tracking the exploits that are used by The NSO Group and brought them to Apple’s attention. Thus based on that, this is something that you should install ASAP.

UPDATE: Apple also released Security Update 2021-006 for macOS Catalina. The security notes say that it fixes one of the three exploits mentioned above. You should likely update to that as well to protect yourself.

Leave a Reply

Discover more from The IT Nerd

Subscribe now to keep reading and get access to the full archive.

Continue reading