Monday, May 13, 2024

Apple Released Security Updates for Safari, iCloud, iOS ,macOS, watchOS, iTunes

Apple released security updates for many of their products including iOS, macOS, iCloud, iTunes along with fixes of some serious vulnerabilities.

Safari 11.1.1 released with fixes of some critical vulnerabilities that leads to the malicious website that may be able to cause a denial of service, address bar spoofing,  cookies being overwritten also it leads to attacker perform arbitrary code execution.

macOS High Sierra 10.13.5 released with a lot more security fixes for the vulnerabilities that exist in the  10.13.4 version.

Fixed vulnerabilities for macOS that leads to execute some of the dangerous attacks such as arbitrary code with kernel privileges, perform a denial of service attack, conduct impersonation attacks etc.

All these vulnerabilities are discovered in various Framework and applications such as Accessibility Framework, AMD, Bluetooth, FontParser,iBooks, Kernel.

Also, Apple Released patches for most recently discovered EFAIL Attacks that lead to Leaked Encrypted Emails in Plain Text. This issue was addressed with the improved isolation of MIME in Mail.

Windows WebKit based vulnerability patches released for iCloud for Windows 7.5, iTunes 12.7.5 for Windows.

All the Apple Watch models are Impacted by many of critical vulnerabilties such as gain elevated privileges that discovered by  Google Project Zero and other vulnerabilities were reported by various security researchers and firms.

Apple Released Security Updates

Name and information linkAvailable forRelease date
iCloud for Windows 7.5Windows 7 and later01 Jun 2018
Safari 11.1.1OS X El Capitan 10.11.6, macOS Sierra 10.12.6, and macOS High Sierra 10.13.401 Jun 2018
macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El CapitanOS X El Capitan 10.11.6, macOS Sierra 10.12.6, macOS High Sierra 10.13.401 Jun 2018
iOS 11.4iPhone 5s and later, iPad Air and later, and iPod touch 6th generation29 May 2018
watchOS 4.3.1All Apple Watch models29 May 2018
iTunes 12.7.5 for WindowsWindows 7 and later29 May 2018
tvOS 11.4Apple TV 4K and Apple TV (4th generation)29 May 2018

You can check the update process from following links and Apple advised user to update their product and maintain your Apple product’s security.

Also Read:

XMRig – New Cryptojacking Malware Attack on Apple Mac Devices

Penetration Testing Checklist with Android, windows, Apple & Blackberry Phones

Now Fix Available for Indian Telugu Character that Crashes Apple Devices

Website

Latest articles

Nmap 7.95 released – What’s New!

Nmap's version 7.95 emerges as a testament to the relentless efforts of its development...

Microsoft Edge Zero-Day Vulnerability Exploited in the Wild

A zero-day vulnerability in Microsoft Edge, which has been tagged as CVE-2024-4671, has been...

Passwordless Authentication Standard FIDO2 Flaw Let Attackers Launch MITM Attacks

FIDO2 (Fast Identity Online) is a passwordless authentication method developed by FIDO Alliance to...

Apache OFBiz RCE Flaw Let Attackers Execute Malicious Code Remotely

Many businesses use enterprise resource planning (ERP) systems like Apache OFBiz.However, it has been...

Ohio Lottery Hacked: 500,000+ Customers Data Exposed

A major cybersecurity breach happened at the Ohio Lottery, letting people into its private...

Hackers Exploiting Vulnerabilities 50% Faster, Within 4.76 Days

Cybersecurity researchers are sounding the alarm that hackers are exploiting software vulnerabilities faster than...

Hackers Moving To AI But Lacking Behind The Defenders In Adoption Rates

Hackers were actively exploiting the generative AI for cyber attacks; not only that, even...
Balaji
Balaji
BALAJI is an Ex-Security Researcher (Threat Research Labs) at Comodo Cybersecurity. Editor-in-Chief & Co-Founder - Cyber Security News & GBHackers On Security.

Free Webinar

Live API Attack Simulation

94% of organizations experience security problems in production APIs, and one in five suffers a data breach. As a result, cyber-attacks on APIs increased from 35% in 2022 to 46% in 2023, and this trend continues to rise.
Key takeaways include:

  • An exploit of OWASP API Top 10 vulnerability
  • A brute force ATO (Account Takeover) attack on API
  • A DDoS attack on an API
  • Positive security model automation to prevent API attacks

Related Articles