Alerts

We highlight current cyber security threats in New Zealand, and provide guidance on what to do if they affect you.

4:45pm, 28 January 2021

TLP Rating: White

Vulnerabilities in Apple devices reportedly being targeted by attackers

Apple has released an updated software version 14.4 for iOS, iPadOS and tvOS. This update fixes three significant weaknesses in the system that could allow an attacker access a person’s device without authorisation.

CERT NZ is urging anyone with an Apple device to immediately update their devices.

What's happening

Systems affected

Apple have stated the vulnerabilities affect three of their operating systems:

  • iOS
  • iPadOS
  • tvOS

For a complete list of products that are able to be updated see the full list on Apple's website External Link .

What to do

Mitigation

Immediately update your Apple iOS, iPadOS and tvOS devices to version 14.4 where the update is available. For most people, a pop-up should alert you that an update is available – select ‘Update Now’.

If you do not receive a pop up message, follow these steps:

Settings > System > Software Update. In there, select “Update Software”.

For further information on affected devices and the update, see Apple's security notification. External Link

For further information about updating devices, see CERT NZ's guide to updating your devices.   

CERT NZ recommends that anyone who has a device that is not able to receive updates look to replace their devices. For further information, see our guide on end-of-life devices.

More information

If you require more information or further support, submit a report on our website or contact us on 0800 CERTNZ.

Report an incident to CERT NZ

For media enquiries, email our media desk at media@mbie.govt.nz or call the MBIE media team on 027 442 2141.