Why even opening images can jeopardise teaching devices
A vulnerability has been discovered in the iPhone, iPad and Mac operating systems that attackers are already actively exploiting. The "Image I/O" image processing library is affected. This component is responsible for opening and displaying various image files. This is precisely where the risk lies: receiving and displaying a manipulated image can be enough to trigger a cyberattack. So you don't have to click or confirm anything - the attack runs invisibly in the background.
Zero-click attacks via manipulated images on iPhone, iPad and Mac?
For teachers, this means that even if you only open images in a chat, email or presentation, the attack can be triggered. As no action is required on your part, experts refer to this as a zero-click attack. In the worst case scenario, attackers can gain access to your personal data, passwords or teaching materials.
Who is affected?
Not only the very latest devices, but also older models are affected by this vulnerability. Apple has closed the vulnerability in the latest versions of its operating systems: iOS 18.6.2, iPadOS 18.6.2 and macOS 15.6.1. At the same time, updates have also been made available for older systems, including iPadOS 17.7.10, macOS Ventura 13.7.8 and macOS Sonoma 14.7.8. These updates improve the memory management of the image library - and close the dangerous gap.
What should you do now?
To ensure that you and your school can continue to work safely, you should act immediately:
Perform update: On your iPad or Mac, open Settings → General → Software update and install the latest version.
Consider all devices: Also think of older iPads or Macs that are still in use in the classroom or at home.
Secure student equipment: Advise your students or the responsible IT person to also install the update - especially if school iPads are used.
Conclusion
In the hectic school day, it is easy to put off system updates. But in this case, no time should be lost: The Apple security update is quickly installed and reliably protects you, your data and the digital work with your class from attacks.
