Another big reason to install iOS 17.4 right now – it fixes two major security threats

Apple has just launched iOS 17.4, and right now everyone’s attention is focused on how it lets you run third-party app stores on your iPhone – although only if you're in the European Union. But there’s another important reason you should upgrade: it fixes two extremely serious security flaws.

In a new security post (via BleepingComputer), Apple says that iOS 17.4 and iPadOS 17.4 resolve two zero-day bugs in the iOS kernel and Apple’s RTKit that might allow an attacker to bypass your device’s kernel memory protections. That could potentially give malicious actors very high-level access to your device, so it’s imperative that you patch your iPhone as soon as possible by opening the Settings app, going to General > Software Update and following the on-screen instructions.

These issues are not just hypothetical; Apple says it is “aware of a report that this issue may have been exploited” in both cases, and if a zero-day flaw has been actively exploited it means hackers have been able to take advantage of these issues without anyone knowing. With that in mind, there’s every reason to update your device now that Apple has issued a set of fixes.

Apple says the bugs affect a wide range of devices: the iPhone XS and later, iPad Pro 12.9-inch 2nd generation and later, iPad Pro 10.5-inch, iPad Pro 11-inch 1st generation and later, iPad Air 3rd generation and later, iPad 6th generation and later, and iPad mini 5th generation and later. In other words, a lot of people are potentially impacted.

Actively exploited

holding an iphone

(Image credit: Shutterstock)

Zero-day flaws like these are usually exploited in targeted attacks, often by sophisticated state-sponsored groups. Apple didn’t share any details of how or when these vulnerabilities were put to nefarious use, nor whether they were discovered by Apple’s own security teams or by external researchers.

Apple devices are known for their strong defenses, but are increasingly falling under hackers’ crosshairs. Recent research suggests that there were 20 active zero-day flaws targeting Apple products in 2023 – double the number of the previous year. According to BleepingComputer, three zero-day attacks on Apple devices have been patched so far in 2024.

This kind of exploit demonstrates why it’s so important to keep all of your devices updated with the latest patches, especially if they include security fixes. Leaving yourself vulnerable is a dangerous gamble when there are extremely sophisticated hacking groups out there in the wild. With that in mind, make sure you download the latest iOS 17.4 update as soon as you can.

You might also like

TechRadar – All the latest technology news

Read More

iOS 17.4 might give you more options for turning off those FaceTime reactions

The FaceTime video reactions Apple introduced in iOS 17 are kind of cool – fireworks when you show two thumbs up, and so on – but you don't necessarily want them going off on every call. Now it looks as though Apple is about to make the feature less prominent.

As per MacRumors, with the introduction of iOS 17.4 and iPadOS 17.4, third-party video calling apps will be able to turn the reactions off by default. In other words, you won't suddenly find balloons filling the screen on a serious call with your boss.

That “by default” is the crucial bit – at the moment, whenever you fire up FaceTime or another video app for the first time, these reactions will be enabled. You can turn them off (and they will then stay off for that app), but you need to remember to do it.

The move also means third-party developers get more control over the effects that are applied at a system level. As The Verge reports, one telehealth provider has already taken the step of informing users that it has no control over these reactions.

Coming soon

FaceTime reactions

A thumbs down is another reaction you can use (Image credit: Apple)

This extra flexibility is made possible through what's called an API or Application Programming Interface – a way for apps to interact with operating systems. It would mean the iOS or iPadOS setting no longer dictates the setting for every other video app.

The changes have been spotted in the latest beta versions of iOS 17.4 and iPadOS 17.4, though there's no guarantee that they'll stay there when the final version of the software rolls out. As yet it's not clear if the same update will be applied to macOS.

iOS 17.3 was pushed out on January 22, so we shouldn't have too much longer to wait to see its successor. Among the iOS 17.4 features in the pipeline, based on the beta version, we've got game streaming apps and automatic transcripts for your podcasts.

Apple will be hoping that a new version helps to encourage more people to actually install iOS 17 too. Uptake has been slower than it was with iOS 16, with users citing bugs and a lack of new features as reasons not to apply the update.

You might also like

TechRadar – All the latest technology news

Read More