Apple today is rolling out iOS 14.8 for compatible iPhones. This is one of those unglamorous security updates that doesn’t bring much on the surface but does actually fix some important security loopholes and it’s imperative you install it at the earliest.
The iOS 14.8 update provides fixes for the CoreGraphics and WebKit vulnerabilities that Apple says may have been exploited.
The CoreGraphics vulnerability was first discovered by The Citizen Lab, who identified it as a zero-click iMessage exploit by the NSO Group, the company accountable for the infamous spyware Pegasus that was in news recently.
The exploit is supposed to have been used to target Bahrain activists by using Pegasus to hack them.
Evaluating the nature of the update, it’s presumably in everyone’s best interests to install it ASAP. The update is available for all iPhone models including and newer than the iPhone 6s.
Moreover, the update is also available on iPads (Air 2 and newer), iPod touch, macOS Big Sur 11.6, macOS Catalina, and watchOS 7.6.2.