Apple Blocks Rapid Security Response Update After Problems Downloading Websites

Apple has blocked the Rapid Security Response (RSR) update it sent to iPhone, iPad and Mac users yesterday after it caused problems when downloading websites. The update was intended to fix a zero-day vulnerability in WebKit, leaving Apple devices vulnerable in the meantime.

What is the Rapid Security Response Update?

The tech giant provided further explanation of the RSR update in a statement: “Apple is aware of an issue where this Rapid Security Response may prevent some websites from displaying correctly.”

Devices Remain Vulnerable

Although it is generally better to close a zero-day vulnerability, Apple chose to withdraw the update. The company said a successor to the update is coming soon. In the meantime, Apple devices remain vulnerable to a WebKit zero day, which allows hackers to force the device to execute arbitrary code and infect it remotely.
There are reports that hackers are actively exploiting the vulnerability, which is why Apple opted to implement the patch via an RSR update instead of waiting for a major software update.
For those who already installed the update, Apple provides instructions to manually remove it: “You can choose to remove Rapid Security Response (a): Tap Settings > About > iOS version on ‘Delete security response’. Then tap Delete to confirm.”