Apple Releases iOS 12.3 and Security Updates to Its Products

The newest array of updates from Apple has arrived, with an array of updates for a variety of products addressing numerous security concerns, some of them serious. While these updates, particularly iOS 12.3, also add several new and exciting features that are sure to please users, there are also new layers of security and fresh bug fixes going into place behind the scenes to keep iPhone users safe. Here’s how the updates break down:

iOS 12.3

More than 40 separate flaws were patched and fixed in this latest version of iOS, though …

iOS 12.2 Patches Majors Security Flaws; Users Should Update Immediately

It seems like only yesterday when Apple was taking Group FaceTime down to give itself time to fix a severe bug discovered by a teenager. In the latest round of updates, iOS received fixes for several bugs as bad or worse than the FaceTime issue that gained a lot of publicity. These, however, Apple kept under wraps until the latest version, 12.2, was ready for release to the public. That means that while no one was likely affected “in the wild” by these issues, it’s imperative to secure your device …

Apple Pushes Latest Round of Updates for a Variety of Products

It’s here: the latest round of updates for Apple products has arrived, and it’s a doozy. This series of updates is jam-packed with bug fixes and security updates that iPhone, iPad, and Mac users should all download right away to begin taking advantage of their added safety improvements. Products included in this set of updates are as follows:

Safari (12.1) tvOS (12.2) macOS Mojave (10.14.4) macOS High Sierra (Update 2019-002) macOS Sierra (Update 2019-002) iOS (12.2)

If you are using versions prior to those listed above, it’s time to update. Check your …

iPhone Prototypes Find Their Way to Hackers and Researchers Alike

Have you ever wondered about how hackers or security researchers can figure out where the hidden flaws in iOS lay? For years, that’s been a big question, from concerns about how companies such as Cellebrite and GrayKey found their way into iOS to how researchers were able to examine how the Secure Enclave works. Thanks to a report by Motherboard picked up by Cult of Mac; we now have a better idea of what’s behind it all: internal prototypes somehow stolen from Apple and then re-sold on the gray market.

What …

Newly-Discovered Bug in Group FaceTime Inadvertently Allows Eavesdropping

When Apple debuted iOS 12.1 late last year, one of the flagship additions to the system was Group FaceTime. This long-requested feature allows multiple users to enjoy simultaneous face-to-face video chat through FaceTime. However, in the wake of a serious flaw in Group FaceTime that was disclosed this past week, the feature is currently inaccessible on all iOS devices.

At issue is the potential risk for spying on the audio (and in some cases, video) feeds from a phone targeted through the flaw. Unlike many iOS bugs, this one does not …

What’s in Apple’s Latest Security Digest?

Apple recently released a comprehensive set of security updates, affecting devices and applications ranging from the iPhone to the Apple Watch to iTunes to the Apple TV. Below, we have outlined some basic details about these updates, including the devices they are intended for and the security problems they fix.

APPLE-SA-2018-12-06-1 watchOS 5.1.2

This update for watchOS addresses numerous security vulnerabilities that could be exploited to gain or elevate privileges, to execute arbitrary code, to spoof the watch interface, or to present untrusted configurations as verified or trustworthy.

APPLE-SA-2018-12-05-7 Shortcuts 2.1.2

Apple has not …

Apple Releases, Updates macOS Mojave and iOS 12, But Bricks Some Users’ Watches

In early September, Apple achieved two milestone releases: the arrival of iOS 12 for mobile devices and macOS Mojave for the desktop environment. Along with a host of bug fixes, both operating systems pushed their security hardening forward. Most notably, users on macOS can now trust that applications won’t gain access to the full contents of their hard disk without permission. While the changes do add the potential for dialog box fatigue and has impacted the operation of some software, it’s in line with Apple’s continued efforts to lock down …

Passcode Bypass Exploit for iOS 12.1 Appears Just After Release

Just a few hours after Apple released iOS 12.1 – which contained a few new features and a large slate of bug fixes – a security researcher identified a new privacy flaw. The researcher, Jose Rodriguez, recently made headlines a few weeks ago after identifying a problem with Siri similar to this new vulnerability. In both cases, an unauthorized user could access restricted information by bypassing a user’s PIN passcode. Though the exploits require physical access to your device to execute, they can result in the exposure of photos (in …

Checklist 113: Security Breaks and Fixes in iOS

A slightly surprising slip-up on Apple’s part, a helpful security how-to, and an update on a persistent foe — that’s what we’re diving into this week as we tour the headlines and pluck out the security stories that seem most ripe for an interesting discussion. On today’s list, we’re checking off the following stories:

A bypass in Apple’s hours-old update
Scammy subscriptions, and how to stop them
And GrayKey is getting stuck in the lock

This week, we’re starting off with a pretty unique story. When Apple releases a new update, the …

The release of iOS 12 Brings Both Security Improvements and Bug Fixes

The latest major version of Apple’s flagship mobile operating has been released, along with a group of updates shared among iOS and many other products, include macOS Mojave and watchOS. As a significant milestone, iOS 12 consists of a variety of hardened security improvements alongside various fixes for many different vulnerabilities and bugs. From making good security easier for users, to locking down loopholes, there’s a lot to unpack in iOS 12.

First up: the latest improvements to the operating system itself. With two-factor authentication more important for user …

Apple’s July Security Updates Correct a Host of Problems

It’s that time again: Apple has pushed out a variety of updates for practically all its products, from iTunes for Windows to multiple flavors of macOS, plus the latest version of iOS 11.4. New security updates are also available for iCloud for Windows, Safari, watchOS, and tvOS. What should you know about these updates?

First, iOS 11.4.1 finally includes the much-discussed USB Restricted Mode, a new security feature that aims at making it more difficult for law enforcement agencies and others from using phone-cracking devices to break past a …

Researcher Discloses Potential Brute Force Attack on iPhone; Apple Says It’s Not Real

A strong passcode is one of the most important elements of personal security on iOS devices. While it has been some time since Apple introduced the stronger six-digit passcodes (which they now recommend), many people continue to use the four-digit PIN. According to one recent report by a security researcher, the iPhone could be vulnerable to an extremely simple brute force attack which would render those four digits useless. However, Apple has since taken the public stance that the vulnerability as described does not exist. What’s going on here?

July 3, 2018 • 2 min read