ALERT: Patch iOS, Apple watch OS, and MacOS ASAP

Friday, September 8, 2023

This message is intended for anyone using or managing iOS, Apple watch, or MacOS devices.

Summary

Users of iOS, Apple watch OS, and MacOS should update their devices as soon as possible to protect against a known "zero-day, zero-click" vulnerability that has been exploited in the wild.

Problem

A "zero-day, zero-click" vulnerability in Apple systems (iOS and MacOS) can allow compromise of the systems without user interaction. Once compromised, malicious actors can read, view, or listen to communications from the device without the user's knowledge. This vulnerability may also allow further sorts of compromise on these devices.

Affected Systems

  • iOS versions prior to 16.6.1
  • MacOS versions prior to 13.5.2
  • Apple watch OS versions prior to 9.6.2

Action Items

Apply updates as soon as possible to Apple devices running versions of iOS, Apple watch OS, or MacOS prior to those listed above.

Information for Users

MiWorkspace managed Macs are being patched. Users should allow updates to run when prompted that they are available.

Personally owned iOS, Apple watch, and MacOS devices should be updated as soon as possible. This is especially important if you use a personal device for U-M business in any way.
 

Questions, Concerns, Reports

Please contact ITS Information Assurance through the ITS Service Center.