Latest iOS 12.4 update from Apple puts devices at risk.

The most recent iOS update released in July is a source of concern for Apple users. This recent update accidentally reopened a vulnerability (CVE-2019-8605) that was patched several months back. According to Motherboard, a security researcher, Pwn20wnd, reported the bug on Github. According to him, this vulnerability will allow hackers to jailbreak the device. 

What is jailbreaking in this context?

Jailbreaking allows iOS device users to install apps and features that are not supported on the official store. For security reasons, Apple allows users to install apps from the App Store only.  However, with this latest update, iOS devices will be vulnerable to cybercriminals who can exploit this bug to install malicious content. 

This issue was previously identified by security researcher Ned Williamson in March, and Apple had issued a patch with the iOS 12.3 update. With iOS 12.4, Apple managed to fix a critical vulnerability that could allow a remote attacker to compromise the device just by sending an iMessage with malicious content, however, it accidentally reopened an old vulnerability in the process. 

As of now, Apple has not released a patch to fix this bug. Meanwhile, users should exercise caution while installing apps and accessing links and attachments on their devices. If users have not upgraded to the latest version, it would be wise to wait and apply the bug-free patch that will soon be released by Apple.