Attackers stole a limited amount of internal credential material after malware hidden in poisoned packages reached two staff machines

Owners of affected iPhones can stop checking for patches now: the fix for this SecureROM bug comes in a new handset