{"id":44039,"date":"2022-04-04T09:34:04","date_gmt":"2022-04-04T13:34:04","guid":{"rendered":"https:\/\/www.kaspersky.com\/blog\/?p=44039"},"modified":"2022-04-04T09:34:04","modified_gmt":"2022-04-04T13:34:04","slug":"always-update-safari-on-iphone","status":"publish","type":"post","link":"https:\/\/www.kaspersky.com\/blog\/always-update-safari-on-iphone\/44039\/","title":{"rendered":"Always update Safari on your iPhone"},"content":{"rendered":"<p>Lots of iPhone users aren\u2019t crazy about the iOS built-in browser, Safari, and prefer to use an alternative \u2014 Google Chrome, Mozilla Firefox, or even something more exotic like DuckDuckGo, Brave or Microsoft Edge (yes, there\u2019s Edge for iOS!).<\/p>\n<p>iPhone users who prefer alternative browsers might get lulled into thinking that the vulnerabilities in Safari and the WebKit engine don\u2019t present a direct danger to them. Unfortunately, this isn\u2019t the case. In this post, we give you the lowdown and tell you why you need to make sure that Safari and WebKit on your iPhone are always updated in time.<\/p>\n<h2>Every browser in iOS is Safari<\/h2>\n<p>Every browser is based on what is called an \u201cengine.\u201d The engine processes the code that is received from the internet and transforms it into the web pages that the browser ultimately shows the user. Of course, the browser has a bunch of other necessary and useful parts that direct the engine and ensure that the additional features work. Think of the browser engine like the engine of a car: it\u2019s the most important part of a browser and without it you won\u2019t get anywhere.<\/p>\n<p>There are three major browser engines in the world. Google uses its own <a href=\"https:\/\/en.wikipedia.org\/wiki\/V8_(JavaScript_engine)\" target=\"_blank\" rel=\"nofollow noopener\">V8 engine<\/a> in its Chrome and Chromium browsers, while Microsoft Edge and dozens of other browsers are based on Chromium. There is also the <a href=\"https:\/\/en.wikipedia.org\/wiki\/Gecko_(software)\" target=\"_blank\" rel=\"nofollow noopener\">Gecko<\/a> engine \u2014 its modern version is called Quantum \u2014 which Mozilla developed and supports for the Firefox browser and a few others. Finally, the third giant of the modern web is Apple\u2019s engine \u2014 <a href=\"https:\/\/en.wikipedia.org\/wiki\/WebKit\" target=\"_blank\" rel=\"nofollow noopener\">Webkit<\/a>, which is used in the Safari browser.<\/p>\n<p>But here\u2019s the thing. The Chrome and Firefox versions for desktop computers and Android are built on Google\u2019s V8 engine and Mozilla\u2019s Gecko\/Quantum engine, respectively. However, it\u2019s a different story for iPhones. In keeping with Apple\u2019s policies, there is <a href=\"https:\/\/developer.apple.com\/app-store\/review\/guidelines\/\" target=\"_blank\" rel=\"nofollow noopener\">only one<\/a> engine permitted in iOS \u2014 you guessed it: WebKit. This means that all browsers for iOS are essentially Safari with different user interfaces.<\/p>\n<div id=\"attachment_44042\" style=\"width: 1470px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2022\/04\/04092940\/always-update-safari-on-iphone-webkit.jpg\"><img decoding=\"async\" aria-describedby=\"caption-attachment-44042\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2022\/04\/04092940\/always-update-safari-on-iphone-webkit.jpg\" alt=\"Excerpt from the iOS app developer rules: \" apps that browse the web must use appropriate webkit framework and javascript. width=\"1460\" height=\"700\" class=\"size-full wp-image-44042\"><\/a><p id=\"caption-attachment-44042\" class=\"wp-caption-text\">Excerpt from the iOS app developer rules: \u201cApps that browse the web must use the appropriate WebKit framework and WebKit JavaScript.\u201d<\/p><\/div>\n<p>This means that all vulnerabilities found in WebKit present a danger for users of <em>any<\/em> browsers for iOS. Since iPhones are a very tempting target for hackers, security specialists study the WebKit engine all the more closely, and as a result, they find vulnerabilities in it rather often. This includes vulnerabilities that attackers are already using in the wild.<\/p>\n<p>One of the most dangerous types of vulnerabilities in a browser engine is a so-called zero-click vulnerability, which allows bad actors to infect an iPhone without any action by the user. When this kind of vulnerability is exploited, the user doesn\u2019t need to be convinced to download or install anything. All the attacker needs do is draw the victim to a specially built website with malicious code or hack a popular site and implant the malicious code in it. After the user visits such a site through a vulnerable browser, the attackers can take control of the iPhone.<\/p>\n<h2>How to update Safari and WebKit<\/h2>\n<p>It\u2019s important to remember that the update of the WebKit engine and Safari browser isn\u2019t related to the update of the browser apps you\u2019re using. Google Chrome automatically updates from the App Store \u2014 that is, if you haven\u2019t disabled this option, and we don\u2019t recommend that you do \u2014 but in essence this is an update of the shell program, not the engine. So this won\u2019t solve the problem of vulnerabilities in WebKit.<\/p>\n<p>To avoid vulnerabilities in both the WebKit engine and Safari browser, you need to install the appropriate iOS updates. The best thing to do is to make sure to install all the latest operating system updates \u2014 after all, the vulnerabilities aren\u2019t just in the browser engine but also in other important components of iOS.<\/p>\n<p>To update your iPhone, go to <em>Settings \u2192 General \u2192 Software Update<\/em>. If you see a button on the screen that says <em>Download and Install<\/em>, tap it and follow the instructions.<\/p>\n<div id=\"attachment_44040\" style=\"width: 2310px\" class=\"wp-caption aligncenter\"><a href=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2022\/04\/04092847\/always-update-safari-on-iphone-settings-EN.png\"><img decoding=\"async\" aria-describedby=\"caption-attachment-44040\" src=\"https:\/\/media.kasperskydaily.com\/wp-content\/uploads\/sites\/92\/2022\/04\/04092847\/always-update-safari-on-iphone-settings-EN.png\" alt=\"Where to find the iOS update in your iPhone's settings\" width=\"2300\" height=\"1624\" class=\"size-full wp-image-44040\"><\/a><p id=\"caption-attachment-44040\" class=\"wp-caption-text\">Where to find the iOS update in your iPhone\u2019s settings<\/p><\/div>\n<h2>Don\u2019t be afraid of iOS updates<\/h2>\n<p>A lot of users are lukewarm about updating the operating system: some people don\u2019t like having to get used to new features in the interface, some worry about having less storage, while others fear that after an update the iPhone may start to slow down or some old apps that are no longer supported in the new version will stop working.<\/p>\n<p>These fears aren\u2019t totally unfounded. It\u2019s true that Apple does sometimes make the interface less user-friendly. It\u2019s also true that each new version of the system takes up a bit more storage than the previous one and leaves less space for your files. And it\u2019s no myth that iPhones have slowed down after an update \u2014 this has been <a href=\"https:\/\/www.vox.com\/2017\/12\/22\/16807056\/apple-slow-iphone-batteries\" target=\"_blank\" rel=\"nofollow noopener\">documented<\/a>.<\/p>\n<p>But we still recommend that you always keep your iPhone updated: doing so is crucial for keeping your data safe and ensuring that it doesn\u2019t fall into the wrong hands. Unfortunately, <a href=\"https:\/\/www.kaspersky.com\/blog\/ios-security-explainer\/23811\/\" target=\"_blank\" rel=\"noopener nofollow\">there is no full-fledged antivirus for iOS<\/a>. That means that the iPhone\u2019s security is contained only in Apple\u2019s protection mechanisms, so any hole in them without a system update remains an open door for hackers.<\/p>\n<input type=\"hidden\" class=\"category_for_banner\" value=\"ksec\">\n","protected":false},"excerpt":{"rendered":"<p>If you use an iPhone, it\u2019s crucial to always install the Safari and WebKit updates, even if your browser of choice is Chrome, Firefox or something else. Here\u2019s why.<\/p>\n","protected":false},"author":421,"featured_media":44041,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[9],"tags":[1343,1278,16,21,1250,26,534,268],"class_list":{"0":"post-44039","1":"post","2":"type-post","3":"status-publish","4":"format-standard","5":"has-post-thumbnail","7":"category-tips","8":"tag-0days","9":"tag-browsers","10":"tag-chrome","11":"tag-firefox","12":"tag-ios","13":"tag-iphone","14":"tag-safari","15":"tag-vulnerabilities"},"hreflang":[{"hreflang":"x-default","url":"https:\/\/www.kaspersky.com\/blog\/always-update-safari-on-iphone\/44039\/"},{"hreflang":"en-in","url":"https:\/\/www.kaspersky.co.in\/blog\/always-update-safari-on-iphone\/24007\/"},{"hreflang":"en-ae","url":"https:\/\/me-en.kaspersky.com\/blog\/always-update-safari-on-iphone\/19494\/"},{"hreflang":"ar","url":"https:\/\/me.kaspersky.com\/blog\/always-update-safari-on-iphone\/9847\/"},{"hreflang":"en-us","url":"https:\/\/usa.kaspersky.com\/blog\/always-update-safari-on-iphone\/26318\/"},{"hreflang":"en-gb","url":"https:\/\/www.kaspersky.co.uk\/blog\/always-update-safari-on-iphone\/24276\/"},{"hreflang":"es-mx","url":"https:\/\/latam.kaspersky.com\/blog\/always-update-safari-on-iphone\/24632\/"},{"hreflang":"it","url":"https:\/\/www.kaspersky.it\/blog\/always-update-safari-on-iphone\/26584\/"},{"hreflang":"ru","url":"https:\/\/www.kaspersky.ru\/blog\/always-update-safari-on-iphone\/33037\/"},{"hreflang":"tr","url":"https:\/\/www.kaspersky.com.tr\/blog\/always-update-safari-on-iphone\/10599\/"},{"hreflang":"pt-br","url":"https:\/\/www.kaspersky.com.br\/blog\/always-update-safari-on-iphone\/19250\/"},{"hreflang":"pl","url":"https:\/\/plblog.kaspersky.com\/always-update-safari-on-iphone\/15909\/"},{"hreflang":"de","url":"https:\/\/www.kaspersky.de\/blog\/always-update-safari-on-iphone\/28417\/"},{"hreflang":"ja","url":"https:\/\/blog.kaspersky.co.jp\/always-update-safari-on-iphone\/32474\/"},{"hreflang":"nl","url":"https:\/\/www.kaspersky.nl\/blog\/always-update-safari-on-iphone\/28177\/"},{"hreflang":"ru-kz","url":"https:\/\/blog.kaspersky.kz\/always-update-safari-on-iphone\/24920\/"},{"hreflang":"en-au","url":"https:\/\/www.kaspersky.com.au\/blog\/always-update-safari-on-iphone\/30356\/"},{"hreflang":"en-za","url":"https:\/\/www.kaspersky.co.za\/blog\/always-update-safari-on-iphone\/30124\/"}],"acf":[],"banners":"","maintag":{"url":"https:\/\/www.kaspersky.com\/blog\/tag\/ios\/","name":"iOS"},"_links":{"self":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/44039","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/users\/421"}],"replies":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/comments?post=44039"}],"version-history":[{"count":4,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/44039\/revisions"}],"predecessor-version":[{"id":44046,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/posts\/44039\/revisions\/44046"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media\/44041"}],"wp:attachment":[{"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/media?parent=44039"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/categories?post=44039"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.kaspersky.com\/blog\/wp-json\/wp\/v2\/tags?post=44039"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}