Mystery Apple security update sparks speculation

Mystery Apple security update sparks speculation

Apple releases its first Rapid Security Response update for iPhone, iPad and Mac gadgets, however customers are at the hours of darkness about what security issues they’ve mounted

By

  • Alex Scroxton,
    Security Editor

Published: 03 May 2023 11:16

Apple has launched the primary security update beneath its new Rapid Security Response programme, however has sparked confusion after releasing no details about any of the problems it was fixing, whereas some customers have reported that their gadgets are refusing to simply accept the update.

Rapid Security Responses are a brand new kind of software program launch for Apple iPhone, iPad and Mac gadgets, and are designed to ship what the tech agency deems to be “important” security enhancements in between large-scale software program updates.

According to Cupertino, these may very well be enhancements to the Safari internet browser, the WebKit framework stack, or different important system libraries. They will also be used to mitigate some security points in a extra well timed trend, stated Apple, akin to those who “may have been exploited” – that’s to say, zero-day vulnerabilities.

Rapid Security Responses will solely ever be delivered for the most recent variations of the iOS, iPadOS and macOS working methods, ranging from iOS 16.4.1, iPadOS 16.4.1 and macOS 13.3.1.

Devices ought to take the updates mechanically until disabled, and those that do take the updates will be capable to see that they’ve been efficiently utilized as a letter will seem after the software program model quantity – for instance, iOS 16.4.1 (a).

Keeping shtum

However, regardless of an update having gone out to customers earlier this week, Apple’s security update web page has but to be up to date – on the time of writing, it had not been up to date since 12 April.

Similarly, no wider data has been printed about any points affecting Apple gadgets, though Citizen Lab, the Canadian investigative organisation that uncovered the malicious exercise of Israeli adware producer NSO Group and its prospects, not too long ago launched data revealing that NSO continues to be creating and exploiting new exploits towards Apple gadgets.

Michael Covington, technique vice-president at Jamf, stated regardless of the Rapid Security Response update mounted, the advantages of the brand new programme far outweighed the shortage of readability.

“These updates contain software fixes to address critical vulnerabilities in the underlying operating system. By restricting these patches to just security fixes, Apple is reducing the amount of code it must develop and test, the time between updates, and the overall size of the patch that each device must download. Overall, this reduces the window of exposure and helps to neutralise exploits that are putting users and organisations at risk,” he stated.

“Keeping up-to-date with the latest patches is one of the most effective ways to safeguard devices against cyber threats. Apple’s Rapid Security Response programme makes it simpler and less disruptive for users and administrators to apply necessary updates and ensure that their devices are secure,” he added.

“However, it’s not enough for Apple to provide faster security updates; it’s equally important for the public to understand the significance of applying operating system updates,” continued Covington.

“Shockingly, in 2022, one in five devices ran on an outdated operating system. Therefore, it’s essential for users to be a part of the cyber security strategy and take prompt action when prompted to update their devices.”

At the identical time, a number of customers of Apple gadgets complained at first that they might not settle for the update.

Among them was Paul Ducklin, principal analysis scientist at Sophos, who on Monday 1 May wrote that whereas the update downloaded with out concern on an iPhone, he then noticed a notification and a popup saying the update failed as a result of he wasn’t linked to the web, regardless of being linked to the web and looking electronic mail on the time.

Staffers at The Verge, a expertise journal, reported the identical downside, as did a number of posters on social media websites akin to Reddit and Twitter.

At the time of writing, Apple does appear to have efficiently mounted this concern, suggesting it was merely a short lived glitch.





Read extra on Endpoint security

  • How to make use of the Apple Rapid Security Response updates

    By: Brien Posey

  • Apple security updates repair 33 iPhone vulnerabilities

    By: Alex Scroxton

  • Apple patches actively exploited zero-day iOS bug

    By: Alexander Culafi

  • Apple patches new iPhone zero-day

    By: Alex Scroxton

…. to be continued
Read the Original Article
Copyright for syndicated content material belongs to the linked Source : Computer Weekly – https://www.computerweekly.com/news/366536377/Mystery-Apple-security-update-sparks-speculation

Exit mobile version