![\"iOS](\"https:\/\/www.intego.com\/mac-security-blog\/wp-content\/uploads\/2016\/08\/ios-9.3.4-update.png\")
<\/p>\n<\/p>\n
In a bit of a surprise, Apple has pushed an important security\u00a0update to its mobile operating system to iOS 9.3.4, released on Thursday.\u00a0iOS 9.3.4 is available for iPhone 4s and later, iPad 2 and later, and iPod touch (5th generation) and later.<\/p>\n
The iOS 9.3.4 update patches a memory corruption security flaw\u00a0and sabotages\u00a0the Pangu jailbreak exploit.\u00a0The flaw Apple\u00a0patched may have been discovered and used by Pangu Team to facilitate their jailbreak, according to\u00a0an iClarified report<\/a>.<\/p>\n Apple’s security bulletin<\/a> describes the vulnerability\u00a0as follows:<\/p>\n CVE-2016-4654<\/a> : An application may be able to execute arbitrary code with kernel privileges. A memory corruption issues was addressed through improved memory handling.<\/p><\/blockquote>\n Jeff Gamet over at The Mac Observer<\/a>\u00a0offered a brief overview describing how\u00a0Pangu is a tethered jailbreak for iOS 9.3.3<\/a>, “meaning users need to connect their iPhone or iPad to their computer to use the hack.” Jeff noted, “Like other jailbreaks, Pangu lets users install apps that aren’t available on Apple’s App Store.”<\/p>\n Not surprisingly, similar to what we’ve seen before\u00a0with previous jailbreaks,\u00a0some Pangu users reportedly had their credit cards, PayPal accounts, and Facebook logins compromised after using the tool.<\/p>\n This isn’t the first time a jailbreak exploit compromised iPhones. The malware family, identified by Intego VirusBarrier<\/a> as iOS\/KeyRaider, brought bad news for people jailbreaking their iPhones: Over 225,000 iOS devices were\u00a0hit<\/a> by the\u00a0malware attack. KeyRaider\u00a0malware was\u00a0stealing Apple ID account usernames and passwords, certificate keys, private keys, App Store purchasing information and more.<\/p>\n Other instances\u00a0included the Cloud Atlas malware, identified by Intego’s Mac antivirus as iOS\/CloudAtlas<\/a>, which could\u00a0exploit Apple’s iOS iPhones and iPads if they have been jailbroken. After the iCloud Atlas malware was\u00a0installed on a jailbroken iOS device, it would\u00a0collect a wide variety of information and transmit it to an FTP account under the attackers’ control.<\/p>\n