Apple plugs four security holes
498370
Four issues identified by the Month of Apple Bugs project receive fixes from the company's developer.
427916
One of the first pieces of malicious code targeting Apple's Mac OS X operating system has been discovered.
33433
Second security patch in less than a week Apple has plugged two holes in its QuickTime media player that could create serious security problems for people tricked into visiting malicious websites. The release, which is available for both Windows and Mac platforms, is Apple's second security patch in less than a week.â¦
29086
Several security features in the Mac's new OS are incomplete, say researchers.
769177
Three versions of the smart phone carry vulnerabilities that could allow access to data even when the device is locked.
608293
There is no need for serious alarm, but the exploit does appear to have been crafted before Apple Computer patched the flaw last week.
10049
Apple's latest security updates for QuickTime, iPhone and iPod Touch are available for download.
284739
Apple yesterday released a 12.7MB security update that consists of several revised components including Apache, AppKit, HIToolbox, Kerberos, Postfix, PSNormalizer, Safari and Terminal.
353081
Blog: Recently patched browser from Apple springs another leak.
582193
TechWeb - Apple Computer Inc. has released a patch for 15 Mac OS X flaws, many of them originating from the operating system's open-source components.
208854
The problem that I have with some of the iPhone alarmism is that it leaves an impression that enterprise data is highly secure and that there aren't lots of other potentially much larger holes on which to focus.
443184
MacCentral - Apple Computer Inc. on Thursday released its December security update. The 12.7MB download consists of several updated components including Apache, AppKit, HIToolbox, Kerberos, Postfix, PSNormalizer, Safari and Terminal.
629732
Apple has released its first security updates of the new year, fixing bugs in its QuickTime media player and iPhone and iPod touch devices.As with previous updates, the iPhone 1.1.3 software patch sent those who had installed the unauthorized Jailbreak software -- used to run third-party applications on the iPhone -- scrambling to get their phones up and running. That&#39;s because Apple&#39;s updates have so far always rendered Jailbreak unusable, forcing users to go through a complex re-installation process.According to the Unofficial Apple Weblog, it is possible to run third-party software following this latest update, but the process is complex. A simpler Jailbreak 1.1.3 script is expected to be posted eventually at the iPhone Wiki, which is the hub of much iPhone hacking.The iPhone update fixes two flaws in the Safari browser, including a critical bug that could be exploited to run unauthorized software on the device. A third bug could let an unauthorized user bypass Passcode Lock and launch iPhone applications. The iPod touch is susceptible to the Safari bugs, Apple said.These updates will be rolled out to customers over the next week via the devices&#39; iTunes update mechanism.The QuickTime 7.4 update fixes four critical flaws in the software that could be exploited by attackers to crash the media player or even run unauthorized software on a victim&#39;s computer. The update is available for both the Windows and Mac OS X operating systems.However, the software does not fix a serious flaw in the player that was disclosed over the weekend.Security experts are particularly concerned over this flaw because attack code showing how it can be exploited has also been published. Apple is still working to fix the vulnerability, which has to do with QuickTime&#39;s use of the Real-Time Streaming Protocol.
576338
(InfoWorld) - Apple's iPhone is a toughÂ target for hackers, but a security researcher warned Friday that there are ways the sleek device could potentially be compromised. TheÂ iPhoneÂ has no security software, but Apple doesn't let people load third-party programs on the device, reducing the risk of infection from malicious software. But when the iPhone is connected to the Web, possibilities emerge, said Marius van Oers, a security researcher with McAfee's AVERT Labs in Amsterdam. He doesn't claim to have uncovered a specific security hole in the device, but listed several ways thatÂ determined hackersÂ could use the Web to try to find a way in. Apple is relying on developers to create rich Web-based applications that will be accessed through the mobile version of the company's Safari Web browser. Browser flaws are a proven way for hackers to get unauthorized code running on a system, van Oers said. "It's fairly easy to send someone an SMS (Short Messaging Service) or an e-mail with a Web link," he said. "And once you go to the Web link, then that server can inject code into the iPhone, and if that happens, [a hacker] can have full control." That's what happened with aÂ Safari flawÂ found by Independent Security Evaluators, a company that detailed its findings at the Black Hat security conference in August. By constructing a malicious Web site, the researchers injected code into the iPhone and pilfered recent text messages, phone numbers and e-mail. Apple has since patched the flaw. "Once you get access to the system, it's all over," van Oers said. He presented his view ofÂ iPhone securityÂ Friday at the Virus Bulletin security conference in Vienna. Although he is based in Europe, he examined an iPhone purchased in the U.S. His view of the iPhone's security is more cautionary and speculative, but rooted in the well-known ways that hackers work. Apple also allows the use of JavaScript when the iPhone interacts with Web pages, a programming language that has been used to exploit software problems, van Oers said. Further, Apple's multimedia application QuickTime has been prone to trouble, and there are several proof-of-concept exploits circulating the Web now for version 7, van Oers said. How that proof-of-concept code could affect QuickTime on the iPhone remains to be seen. Nonetheless, with the iPhone already popular in the U.S. and due toÂ go on sale in EuropeÂ in about six weeks, Apple can expect more aggressive attempts by malicious hackers to meddle with it. Hacking mobile devices is less prevalent than hacking desktop computers. But interesting malicious programs have been written for mobiles, including some that repeatedly autodial or send text messages to a premium number. The number is owned by the hackers, who collect the revenue. The chance of those kinds of malicious software affecting the iPhone today is probably low, but "that's the future. Let's hope it will not come to that," van Oers said. Â
313178
Closing in on their Holy Grail The game is on for hackers trying to spot security vulnerabilities in Apple's iPhone and already they're scoring points.â¦
455250
A bug in Apple Inc.'s popular iTunes music player and online store software could be used by hackers to run malicious code on a compromised PC or Mac.
293497
Windows browser not 'secure from day one' Three days after unleashing a bug-infested beta of its Safari browser on Windows users, Apple has released an update plugging three serious holes that could allow miscreants to commandeer a user's machine.â¦