Apple releases iOS 9.3.4 update to squash security bug - CNET

Apple's latest update to its iOS software fixes a security hole that could have been exploited to take control of your iPhone, iPad or iPod Touch.

Released on Thursday, iOS 9.3.4 addresses the problem as one in which an "application may be able to execute arbitrary code with keel privileges," according to an Apple support page. That means an attacker could execute virtually any command, including one that would gain control of your iOS device.

iOS 9.3.4 fixes that vulnerability, the latest in a long line of flaws discovered since iOS 9 was released almost a year ago.

Yes, iOS 9 is approaching its first anniversary, and bugs are still being uncovered. That points to the difficulty in finding flaws that can affect any piece of software. Apple can do all the inteal testing it wants. But many vulnerabilities remain undiscovered until users either stumble upon them or make a concerted effort to find them.

In this case, the flaw in iOS 9.3.3 was found and exploited by a Chinese jailbreaking team called Pangu. In late July, the Pangu team released a tool that allowed users to jailbreak their iOS devices. On its support page, Apple actually credited the folks at Pangu for discovering the flaw, serving as a not-so-subtle nod that iOS 9.3.4 also renders their new jailbreak ineffective.