Generally speaking, you should keep your gadgets and apps updated as much as humanly possible. The nagging reminders are a pain, and having to stop what you’re doing to apply a software patch is annoying, but it’s an important step to take if you’re trying to achieve any kind of real security and privacy online.
In just the past few days, both Apple and Google have issued urgent security updates. They have urged users to update their hardware and software to avoid security issues that the patches can easily correct.
Google Chrome’s very bad week
The Chrome browser suffered at least three security issues this past week. Ars Technica has a thorough write-up of each issue, which you can check out as you download the new software. The first issue only applies to users who had installed a popular extension called The Great Suspender, which suppresses tabs that would otherwise eat up a lot of computer resources if left running in the background.
On Thursday, Google addressed a serious vulnerability, which is summed up here in a post by a security company called Tenable. According to the report, the vulnerability had been observed “in the wild,” which suggests exploit attempts could have affected actual users.
The last exploit leveraged Google’s Sync function, which standardizes a user’s Chrome experience across desktop and mobile devices to dodge protective firewall restrictions. The exploit involved depositing malicious extensions onto a computer by allowing them to sync from the mobile version of Chrome.
Apple’s iPhone and iPad vulnerability
On January 26th, Apple urged iPad and iPhone users to apply security patches contained within its iOS 14.4 and iPad 14.4 updates. According to the announcement, Apple became aware of a trio of security issues that may have been “actively exploited” before the patch.
Apple is typically tight-lipped about security issues pertaining to its software platforms, and this was no exception. The company did reveal that two of the bugs affect WebKit, the underlying framework for its Safari web browser, as well as the Kernel, which is critical to the software as a whole.
Apple may reveal more specific information about the possible exploits down the road, but it typically engages in thorough investigations before doing so. The Apple Security Updates page reads: “For the protection of our customers, Apple doesn’t disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are generally available.”
It’s time to upgrade
Even though it’s unlikely the average person would feel the effects of any of these recent exploits, it’s a nice reminder that those nagging update notices exist for a reason. The next issue could always hit closer to home. So, as annoying as it can be, you should always install them as soon as possible.