Apple's iOS operating system was recently updated to fix a critical vulnerability that could allow hackers to gain full control over users' iPhones and iPads. The flaw, discovered by the cybersecurity firm Lookout, allowed attackers to bypass two-factor authentication (2FA) and remotely install malicious apps on affected devices.
The update fixes the issue by requiring users to enter their passcode after they've entered their 2FA code. However, the company said that it doesn't know of any instances where someone successfully exploited the bug.
The flaw affects iPhone 5S models running iOS 9.0.2 and later, iPad Air 2 models running iOS 9.3.5 and later, and iPad mini 2 models running iOS 9 and later.
Apple released its latest software updates for macOS High Sierra 10.13.6, tvOS 11.2.5, watchOS 4.2.2, and Xcode 10.2.2.
The company said that it plans to release a patch for older versions of iOS and macOS soon.
The flaw was first reported by Lookout on September 26th. Apple fixed the issue on October 1st.
The company issued a statement saying that it takes security seriously and that it's working closely with law enforcement agencies to investigate the matter.
According to Lookout, the flaw exists due to a programming error in the way the operating system handles certain URLs.
The company says that it's not aware of any attacks exploiting the bug.
Apple did not immediately respond to Business Insider's request for comment.
Apple has been under fire lately for failing to disclose flaws in its products sooner. In July, the company admitted that it had failed to disclose a serious bug in its Safari browser until months after researchers discovered it.
Last month, Apple CEO Tim Cook apologized for the company's handling of the Safari bug.
Apple shares fell 0.4% following news of the flaw.
Shares of Google parent Alphabet were down 0.5%.