Privacy

Apple will fix AirTag’s Lost Mode vulnerability that could be used for phishing scams

Apple's promotional image showing an AirTag being held between two fingers

Apple has acknowledged that it's aware of a serious vulnerability plaguing its personal item tracker, dubbed AirTag. The nasty bug allows nefarious actors to redirect the person who finds and scans a lost AirTag to a phishing website instead of the Apple one. The company has confirmed it is working on a fix, saying the solution will be arriving in the next software update.

iOS 15 adds improved Face ID anti-spoofing models, along with other security fixes

Apple promotes Face ID in new 'Nap' ad

While Apple does a solid enough job of detailing most of the new features baked into software updates, there are typically some elements that miss the big unveilings (or even the press releases soon after). And some aren't necessarily meant to see the bright lights of a stage at all. Instead, they are buried within documentation. But that doesn't make them any less important.

Install iOS 14.8 and other Apple updates asap to protect against zero-click Messages attacks

iPhone XS in hand.

The latest round of Apple software updates brings fixes for vulnerabilities making possible recent zero-click attacks that bypassed Apple's BlastDoor security in Messages. iOS 14.8 includes security fixes for two bugs that have been actively exploited in the wild. Do yourself a big favor and install the latest updates to close this particularly dangerous attack vector.