Story image

Apple releases critical security updates for all products

06 Jun 2017

If you put off installing the latest Apple security updates, now is the time to do it, according to Australian security watchdogs Stay Smart Online.

"Last week Apple released security updates to address vulnerabilities in a number of their products including computers, AppleTV, watches, smartphones and tablets. If these updates haven’t been installed automatically on your Apple devices already, or if you postponed the installation when prompted, install them now," a statement says.

Apple recently released a range of updates for macOS, watchOS, iPhones, iPads and AppleTV. Stay Smart Online says that the updates are a precautionary measure and also fix vulnerabilities in the platforms.

Hackers can exploit vulnerabilities to access or take control of devices - opening them up to malware, credential theft or information corruption. Those vulnerabilities are often unintended and part of the design or configuration process, Stay Smart Online explains.

Some of the latest updates to macOS include 802.1X updates for certificate authentication, CoreAudio, CoreText, iBooks and both the Intel and NVIDIA Graphics Drivers. Security has also been tightened up.

Similar updates for iOS include AVEVideoEncoder, CoreAudio, iBooks, Safari and other security updates.

Stay Smart Online warns that if users put off installing the updates, they should do so immediately.

The company also recommends activating automatic updates when possible so that security updates are applied as soon as they become available.

If users choose not to use automatic updates, they should be vigilant about threats, update schedules and making sure any products in use are protected against threats.

"If they are affected install the updates as soon as possible to minimise the risk of being attacked."

Hybrid cloud security big concern for business leaders
A new study highlights that IT and security professionals have significant concerns around security for hybrid cloud and multi-cloud environments.
GitHub launches fund to sponsor open source developers
In addition to GitHub Sponsors, GitHub is launching the GitHub Sponsors, GitHub will match all contributions up to $5,000 during a developer’s first year in GitHub Sponsors.
Check Point announces integration with Microsoft Azure
The integration of Check Point’s advanced policy enforcement capabilities with Microsoft AIP’s file classification and protection features enables enterprises to keep their business data and IP secure, irrespective of how it is shared. 
ESET researchers break down latest arsenal of the infamous Sednit group
At the end of August 2018, the Sednit group launched a spear-phishing email campaign, in which it distributed shortened URLs that delivered first-stage Zebrocy components.
Container survey shows adoption accelerating while security concerns remain top of mind
The report features insights from over 500 IT professionals.
Google 'will do better' after G Suite passwords exposed since 2005
Fourteen years is a long time for sensitive information like usernames and passwords to be sitting ducks, unencrypted and at risk of theft and corruption.
Who's watching you? 
With privacy an increasing concern amongst the public, users should be more aware than ever of what personal data companies hold.
Fake apps on Google Play scamming users out of cryptocurrency
Fake cryptocurrency apps on Google Play have been discovered to be phishing and scamming users out of cryptocurrency, according to a new report from ESET.