Apple

2022 - 8 - 19

Apple security - Apple security alert - apple update

Post cover — Image courtesy of "The Independent"

The urgent Apple update is just the latest battle in a fight for your ... (The Independent)

Such major exploits tend to be used against high-profile and high-risk targets – but normal iPhone users can be caught up in attacks.

It also makes clear that it is only meant for those who are likely to be personally targeted by such attacks. The very fact of using an exploit means that it becomes weaker, so they are generally only used on high-profile targets who are worth the risk. Apple did not give any explicit guidance on who should consider themselves the kind of high-risk user Lockdown Mode is intended to protect. “For the protection of our customers, Apple doesn’t disclose, discuss, or confirm security issues until an investigation has occurred and patches or releases are generally available,” the company states on its website. In the past, Apple has been criticised for both the value and the efficiency of its bug bounty programme, with researchers arguing that they should be given more and that problems are not followed up quickly enough. If Apple were to disclose the nature of an attack, it might also give hackers a clue about how to use it. For the hackers themselves, it is a rare and valuable success in their fight. Apple’s list of security updates makes clear how often those problems are found, and how damaging they can be. It is far from the first time that Apple has released an urgent security update of this kind. It is the latest major flare-up in an ongoing battle for control and entry into iPhones. Hackers are constantly looking for bugs of this kind so that they can be sold on. And the effects of it could be disastrous, even if most people will never know it existed.

Apple iOS 15.6.1: Urgent iPhone Update Suddenly Released With ... (Forbes)

If you thought Apple was done with iOS 15, it's time to think again.

In other words, every iPhone from the iPhone 6s onwards and includes all three generations of iPhone SE. The fact that Apple also disclosed active exploitation in the wild is also worth noting and the bug fixes below are the sixth and seventh zero day exploits Apple has addressed this year, though the first five were all in January to March. Apple is aware of a report that this issue may have been actively exploited.” Those in the public eye such as activists, politicians and journalists should act quicker due to previously becoming targets of nation state spying.” Within a few minutes, it’ll be good to go—this is not a huge update. There are two items on the menu, called Kernel and WebKit respectively. Once you’ve clicked on Download and Install, it’ll do everything for you. And then read [Gordon Kelly](https://www.forbes.com/sites/gordonkelly/?sh=2dff73184200)’s analysis of whether you ought to install or wait. There’s no need to respond to a phishing email or other scam, just doing nothing leaves your iPhone or iPad at risk of being taken over by bad actors. The bugs were reported by anonymous researchers. That’s because the update concerns zero-day security exploits, in other words, users are vulnerable without doing anything. Here’s what’s in it.

Apple security alert highlights the importance of installing updates ... (iNews)

Affected devices included the iPhone 6S and later models, several models of the iPad, Mac computers running MacOS Monterey and some iPod models. Apple ...

“CISA encourages users and administrators to review the [online] Apple security updates page… “Apple has released security updates to address vulnerabilities in macOS Monterey, iOS and iPadOS, and Safari. “Bugs in software are really common, it happens all the time.

Apple warns users to install software updates to prevent hackers ... (Financial Times)

iPhone maker releases fixes to security issues that expert says could give attackers 'full access to a vulnerable device'

[Purchase a Print subscription for 11,12 € per week You will be billed 107,91 € per month after the trial ends](https://subs.ft.com/spa3_uk3m?segmentId=461cfe95-f454-6e0b-9f7b-0800950bef25&utm_us=JJIBAX&utm_eu=WWIBEAX&utm_ca=JJIBAZ&utm_as=FIBAZ&ft-content-uuid=46fe652a-e1bd-48dd-978e-342587c26180) [Purchase a Digital subscription for 6,64 € per week You will be billed 39 € per month after the trial ends](https://subs.ft.com/spa3_digital?ft-content-uuid=46fe652a-e1bd-48dd-978e-342587c26180) [Purchase a Trial subscription for 1 € for 4 weeks You will be billed 65 € per month after the trial ends](/signup?offerId=41218b9e-c8ae-c934-43ad-71b13fcb4465&ft-content-uuid=46fe652a-e1bd-48dd-978e-342587c26180)

Apple warns of exploited security flaw across devices - Information ... (Information Age)

Major security vulnerabilities "actively exploited" within iPhones, iPads and Macs have been disclosed by Apple.

[Overcoming the biggest cyber security staff challenges](/overcoming-biggest-cyber-security-staff-challenges-123499229/) — Andrew Rose, resident CISO EMEA at Proofpoint, discusses the biggest cyber security staff challenges facing organisations, and how to overcome them. Be smarter than your device](/key-mobile-security-be-smarter-than-your-device-123496627/) — Tim Dinsmore, director at Appurity, discusses how being smarter than your device can be the key to optimising mobile security. [Will Strafach](https://www.linkedin.com/in/willstrafach/) said he is yet to see technical analysis of the vulnerabilities patched. [Apple](https://www.apple.com/) [announced](https://www.xda-developers.com/ios-15-6-1-macos-12-5-1/) the general release of its iOS 15.6.1, as well as macOS Monterey 12.5.1, during the company’s recent [WWDC22 conference](https://developer.apple.com/wwdc22/). [Rachel Tobac](https://www.linkedin.com/in/racheltobac/), CEO of [SocialProof Security](https://www.socialproofsecurity.com/), said that successful access by hackers can lead to execution of “any code as if they are you, the user”, going on to state that users who are in the public eye — such as journalists or activists — should be particularly attentive to updates. [revealed](https://support.apple.com/en-gb/HT213412) by the tech corporation in two reports on Wednesday is said to allow threat actors to full admin access to the device, [says The Telegraph](https://www.telegraph.co.uk/business/2022/08/18/apple-warns-security-flaw-iphones-ipads-macs/).

Apple issues major security warning to all iPhone, iPad and Mac users (Messenger Newspapers)

The software flaws could potentially allow attackers to take complete control of these devices.

Apple’s explanation of the vulnerability means a hacker could get “full admin access to the device” so that they can “execute any code as if they are you, the user”, said Rachel Tobac, CEO of SocialProof Security. [software flaws](https://www.bournemouthecho.co.uk/news/19155909.emergency-iphone-hack-goes-viral-light-sarah-everard-case---works/) could potentially allow attackers to take complete control of these devices, Apple said in two security reports. [Apple](https://www.thewestmorlandgazette.co.uk/news/national/uk-today/19198595.fortnite-maker-epic-games-files-complaint-apple--/) has issued a warning to [iPhone](https://www.chesterstandard.co.uk/news/20099656.iphone-users-warned-full-list-phones-will-no-longer-work-obsolete/), iPad and Mac customers over serious security vulnerabilities.

What should Apple users do as iPhones, iPads and Macs hit by ... (ITV News)

Apple has discovered serious security vulnerabilities in iPhones, iPads and Macs that could potentially allow attackers to take complete control of the ...

The tech giant said it is “aware of a report that this issue may have been actively exploited”. “While the vulnerability could allow threat actors to take full control of a device, stay calm and simply get control of your devices and download the software updates available from Apple," he said. Apple has discovered serious security vulnerabilities affecting some iPhones, iPads and Macs that could potentially allow attackers to take complete control of the devices.

Owners urged to update Apple devices quickly but 'stay calm' over ... (Times Series)

The technology giant has issued software updates for the iPhone, iPad, Apple Watch and Mac computers to fix a newly uncovered software issue, telling users the ...

Overall, follow Apple instructions if you think you are infected and consult your IT department at work, school, etc, as needed for more information. “Failing is OK as no-one is perfect. “Do that and move on.

Where's my Apple Watch rest day? (The Verge)

In 2018, I asked for a rest day on the Apple Watch. It still hasn't arrived — and we all know rest days matter for making muscle. So what gives, Apple?

[Overtraining is a real risk for athletes](https://www.tandfonline.com/doi/abs/10.1080/02640414.2018.1424498?scroll=top&needAccess=true&journalCode=rjsp20)! [next WatchOS software ](https://www.theverge.com/2022/7/11/23200105/watchos-9-beta-preview-apple-watch)doesn’t acknowledge this either, despite rumors that the company will release a more [rugged, sport-focused model](https://www.theverge.com/2022/7/25/23277243/apple-watch-pro-battery-new-design-rumors). [I tested out the Apple Watch for several months](https://www.theverge.com/2018/1/24/16926350/apple-watch-series-2-fitness-tracker-healthy-notification-behavior). [not the only person to write about it](https://www.imore.com/hey-apple-watch-can-you-give-it-rest). I work out to enjoy myself, not because it’s my job. (It turns out: four to 12 miles, culminating in a backpacking trip where I unexpectedly hiked 14 miles in one day to get away from a black bear and her cubs.) The reward system — which primes you for seven workouts a week, trying to close all three rings every day, and so on —

Apple Releases Security Updates for Multiple Products - HS Today (HSToday)

An attacker could exploit one of these vulnerabilities to take control of an affected device.

Apple MacOS 12.5.1 Release: Should You Upgrade? (Forbes)

Apple iOS 15.6.1 brings critical fixes and all iPhone owners should update right now...

At this stage, a lot of bugs are still being reported after five beta releases, notably with the user interface — many of which you can find If you are running newer beta software (see ‘The Road Ahead’ section at the end), Both flaws allow hackers to remotely execute malicious code on your iPhone, iPad or Mac and potentially take over your device. [CVE-2022-32894](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32894)) and WebKit, the engine that powers the Safari web browser ( [CVE-2022-32893](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-32893)). Should you upgrade, or does the release bring any significant problems? [chronicled here](https://twitter.com/nikitonsky/status/1557357661171204098). Here’s everything you need to know. [iOS 15.6.1 and iPadOS 15.6.1](https://www.forbes.com/sites/gordonkelly/2022/08/18/apple-ios-15-6-1-release-new-iphone-ipad-update/) to combat two major new security threats. The flaws were found in the kernel, a program at the core of the OS ( [here](https://support.apple.com/en-us/HT212551). [unenroll your device](https://beta.apple.com/sp/betaprogram/unenroll) beforehand. MacOS 12.5.1 is supported by all Monterey-compatible devices, which means the MacBook Pro (Retina, 13-inch, early 2015) and newer.

Apple

Explore the last week