Apple releases security updates to fix the WebKit vulnerability

Apple has launched its first round of Background Security Enhancements to address a vulnerability in WebKit affecting iOS, iPadOS, and macOS. The vulnerability, identified as CVE-2026-20643, relates to a cross-origin issue in the WebKit Navigation API. This could allow an attacker to bypass the same-origin policy by processing malicious web content, jeopardizing user security. Apple’s new strategy The implementation of these security enhancements is carried out through smaller, continuous updates, allowing for a response […]

Apple has released its first round of Background Security Enhancements to address a vulnerability in WebKit affecting iOS, iPadOS, and macOS. The vulnerability, identified as CVE-2026-20643, relates to a cross-origin issue in the WebKit Navigation API. This could allow an attacker to bypass the same-origin policy by processing malicious web content, jeopardizing user security.

Apple’s new strategy

The implementation of these security improvements is carried out through smaller and continuous updates, allowing for a more agile response to potential threats. This strategy is similar to the Security Rapid Response system introduced in iOS 16, designed to facilitate the installation of minor security patches without having to wait for larger software updates. The new versions affect iOS 26.3.1, iPadOS 26.3.1, and the versions of macOS 26.3.1 and 26.3.2, with improvements in input validation to mitigate risk.

Any user can manage these security improvements through the Privacy and Security menu in the Settings app. To ensure the automatic installation of these updates, it is recommended to keep the Automatic Installation option enabled. If this option is disabled, users will have to wait until the next major software update to receive the patches.

Additionally, this update comes shortly after Apple addressed an actively exploited zero-day, which affected multiple operating systems, and also expands patches for several vulnerabilities that were used in the Coruna exploit kit. These moves reinforce Apple’s commitment to security and its ability to respond quickly to emerging threats.

iOS 18.4 brings a countdown timer for 2FA codes

The beta of iOS 18.4 (not to be confused with beta 4 of iOS 18) is now available for members of the developer program and public beta, although it has not yet reached non-beta users. This new version brings a series of improvements aimed at optimizing the iPhone user experience, notably the inclusion of a countdown timer for two-factor authentication (2FA) codes, a feature that makes it easier to use these codes that change every 30 seconds. A more secure operating system, that is the goal of iOS 18.4 […]

The beta of iOS 18.4 (do not confuse with beta 4 of iOS 18) is now available for members of the developer program and public beta, although it has not yet reached non-beta users.

Bluesky DOWNLOAD

This new version brings a series of improvements aimed at optimizing the user experience of the iPhone, notably the inclusion of a countdown timer for two-factor authentication (2FA) codes, a feature that makes it easier to use these codes that change every 30 seconds.

A more secure operating system, that is the goal of iOS 18.4

One of the most important features of Apple Passwords is its fusion between a password manager and an authenticator. Previously, the problem was that 2FA codes did not inform the user when they were going to expire, complicating the login process.

With the new update, a green ring is implemented that gradually fills over 30 seconds, allowing users to have a clear indication of the remaining time until the code becomes nonexistent.

In addition to this improvement in authentication, iOS 18.4 introduces extra icons on larger CarPlay screens, AI-driven priority notifications, a new Genmoji icon for the keyboard, and additional language options for Apple Intelligence.

However, the new Personal Context feature of Siri, which aims to improve understanding of user requests, is still not available in this beta.

Bluesky DOWNLOAD

The final version of iOS 18.4 is likely to be released in April 2024, according to rumors. Until then, users will have to wait to enjoy all the improvements and features that this new operating system has to offer, while the gloomy points of the beta raise doubts about the arrival of some promises made by Apple in the past.