HK Gov warns about iOS, iPadOS vulnerability

Users of Apple Inc. devices running on iOS or iPadOS should beware of certain system vulnerabilities and update their operating systems as soon as possible, two Hong Kong information technology (IT) watchdogs have warned.

The warning was co-issued by the Hong Kong Computer Emergency Response Team Coordination Centre (HKCERT) and the Government Computer Emergency Response Team Hong Kong (GovCERT.HK).

The two entities cited Apple’s earlier report on the issue, saying that the IT giant has “released iOS 15.7.5, iOS 16.4.1, iPadOS 15.7.5 and iPadOS 16.4.1 to fix the vulnerabilities in various Apple devices.”

The models of devices concerned include iPhone 6S and later models, as well as the first generation of iPhone SE; iPad 5th generation and later, iPad Air 2 and later, iPad mini (4th generation) and later, iPad Pro (all models); as well as iPod touch (7th generation).

Should hackers successfully exploit the vulnerabilities, certain instructions, namely code executions, may be implemented arbitrarily, the two watchdogs explained.

They added that the system updates may be triggered automatically if auto-update is turned on, or manually through the system app.

Established in April 2015, GovCERT.HK is a governmental computer emergency response team dedicated to coordinating information and cyber security incidents for the Government of Hong Kong.

GovCERT.HK works closely with the HKCERT to share information on security threats and vulnerabilities, as well as to provide recommendations to the public and private sectors and individuals in protecting their information systems and digital assets. AL