Update Immediately! Apple patches actively used exploits with macOS 13.2.1, iOS 16.3.1, more

Today Apple released software updates across nearly all of their OSes. I recommend everyone install these updates immediately, as they patch a security bug that has been actively exploited. This bug allows a malicious website or advertisement to run code on your computer.

In addition to this security fix, there are also a few other minor fixes and optimizations such as a fix for home automation requests on HomePod and crash detection optimizations for iPhone 14.

Among the releases today are:

• macOS 13.2.1
• iOS 16.3.1
• iPadOS 16.3.1
• watchOS 9.3.1
• tvOS 16.3.2
• HomePod 16.3.2
• Safari 16.3 for macOS 11 Big Sur and macOS 12 Monterey (this update doesn’t even require a restart!)

There are no updates as of yet for iOS 15 or earlier, so my assumption is that this security bug only exists in iOS 16. Since this bug is in WebKit, the underlying technology for Safari, macOS 11 and macOS 12 receive this update with a simple Safari update. Even if you don’t use Safari you should still install this update, as some apps utilize Safari to display content.

To update

• Mac (macOS 13 Ventura or later): Click the Apple menu > System Settings > General > Software Update.
• Mac (macOS 12 Monterey or earlier): Click the Apple menu > System Preferences > Software Update. Apple Support Article HT201541
• iPhone, iPad, iPod Touch: Open the Settings app > General > Software Update. Apple Support Article HT204204
• Apple Watch: First update your iPhone, then on your iPhone tap the Watch app > General > Software Update. Apple Support Article HT204641
• Apple TV: Go to the Settings app > System > Software Update. Apple Support Article HT202716
• HomePod: Updates will install automatically. To push the update along faster see the instructions in Apple Support Article HT208247