Updates must be installed immediately, German agency says

May 28, 2020 05:18 GMT  ·  By

Germany’s Bundesamt für Sicherheit in der Informationstechnik, or BSI, is urging iPhone owners to install the latest security updates released by Apple as soon as possible, as they resolve a critical vulnerability in the Mail app.

Discovered by cybersecurity group ZecOps, the security flaw is believed to affect all versions of the iOS operating system beginning with 3.1.3. And needless to say, all supported iPhones are exposed to attacks, including the iPhone 6s and newer models.

This means the latest-generation iPhones are vulnerable as well, with attacks being able to eventually obtain access to content in the Mail app.

Apple has resolved the vulnerability in iOS 13.5, which was released last week, and now the BSI wants everyone to install this new release as soon as possible.

Fixes now available

“Apple has released security updates with iOS 12.4.7, iOS 13.5, and iPadOS 13.5 that address vulnerabilities for all affected iOS versions. Due to the severity of the vulnerabilities, the BSI recommends that the respective security update be applied immediately to all affected devices. The iOS Mail app can be used again after installing the update,” BSI says in an update to the original advisory.

What’s important to know, however, is that while Apple acknowledged the issues, the company said they alone aren’t enough to access the data in the Mail app.

“The researcher identified three issues in Mail, but alone they are insufficient to bypass iPhone and iPad security protections, and we have found no evidence they were used against customers. These potential issues will be addressed in a software update soon,” Apple said after the bug was disclosed by ZecOps.

To install iOS 13.5 on a supported iPhone, go to Settings > General > Software Update. A reboot of the device will be required to complete the patching.