Apple’s iOS 14.6 was released overnight and comes with several positive features, but also fixes over 40 serious security vulnerabilities.

Apple Australia would not discuss security issues directly, but its website details “WebKit updates” among its more serious fixes.

WebKit is the engine that powers Apple’s Safari browser and has been at the center of several other security issues this year.

These issues include cross-site scripting that gives attackers multiple ways to attack iPhone users, redirect users to a phishing or malicious site, perform actions on a site on behalf of a user, or even obtain information. information from a browsing session.

Apple’s website includes six fixes for WebKit in iOS 14.6, including the risk that a “malicious application could leak sensitive user information.”

It also addressed concerns that “a malicious website may access restricted ports on arbitrary servers” and the risk of “processing maliciously crafted web content may lead to universal cross-site scripting.”

“For the protection of our customers, Apple does not disclose, discuss or confirm security issues until an investigation has taken place and patches or versions are generally available,” the site reads. Web.

“If you need technical assistance with a security issue – for example, resetting your Apple ID password or reviewing recent charges in the App Store – see Get Support. help with security issues.

“If you believe you have discovered a security or privacy breach in an Apple product, find out how to file a report.”

The most positive updates to the new software include new features for AirTags and support for Apple podcast subscriptions.

Updates now allow Family Sharing for the Apple Card while AirTags can be attached to “an email address instead of a phone number for AirTag and Find My Network accessories”.

Originally posted as Hacking Fears Spurs Big iPhone Update