Flaw in Bluetooth Protocols Could Allow Tracking of iPhone, MacBook Users

Bluetooth is one of the most common wireless protocols in the world, allowing a vast range of devices to connect together for shared functionality. From playing music in your car to controlling the temperature of your flatiron, Bluetooth enables us to do many things — and as a result, Bluetooth protocols are standard on iPhones, in MacBooks, and in many other products, too. According to a new study published by researchers from Boston University, though, almost all those devices currently contain a Bluetooth flaw that can erase a user’s privacy.

Bluetooth’s …

Apple Switches Off Apple Watch Walkie-Talkies to Nix Eavesdropping Bug

In response to the discovery of a new critical bug in one of Apple’s own apps, the company has disabled some functionality in Apple Watches to protect users. 

The issue lies with the Walkie-Talkie app, a default app on the Apple Watch designed to let users connect with one of their friends directly for “push to talk” chatting. Once a staple feature on older cell phones, Apple included Walkie-Talkie as a fun addition — yet it seems to have come with a not so fun side-effect of its own. Details are …

Zoom security flaw puts you at risk (even after you uninstall)

Security researcher Jonathan Leitschuh has discovered a major vulnerability in the popular Zoom video conferencing app that could allow malicious actors to turn on your Mac’s camera without your permission.

New Mac Malware Knows When You’re Watching

Security researchers at Intego have discovered a new form of Mac malware—one that shows some surprisingly sneaky behaviour aimed at evading detection by antivirus software and human malware hunters alike.

Sneaky Gatekeeper Flaw Could Let Hackers Run Malware on Macs

Among the most fundamental security features on Macs, Gatekeeper is near the top of the list. A first line of defense against malicious software, Gatekeeper’s job is to verify code signatures, which ensures that the software you’re running is genuine and hasn’t been tampered with by outside forces. Gatekeeper also helps to keep unauthorized software from running without your permission and provides help to users through warning messages letting you know when something might not be safe. Recently, though, a security researcher named Filippo Cavallarin unveiled a flaw in Gatekeeper …

AirPort Base Stations Receive Important Firmware Upgrade

Do you rely on an Apple AirPort for your home Wi-Fi needs, or an AirPort Time Capsule to keep your Mac always backed up? If so, you’ll want to make sure you’ve updated your device to the latest version. On May 30th, Apple released a substantial firmware update for these devices, comprised of several high-priority security fixes. Upgrading will ensure your network remains secure while allowing you to continue enjoying the devices with plenty of peace of mind.

The new software version, 7.9.1, includes eight security fixes in total. Of these, …

Highlights from the 2019 Worldwide Developers Conference

On Monday morning, Apple’s 2019 Worldwide Developers Conference kicked off in San Jose. As is tradition, WWDC began with a keynote presentation from Apple highlighting long-awaited updates, important announcements, and a vision of the road ahead.

Here’s our roundup of the biggest news from the keynote, along with a few comments on what this means for Mac security as well.

macOS

As expected, macOS 10.15 is here. Named “Catalina”, the newest version of macOS features a few important changes and a bittersweet farewell.

Goodbye iTunes

Maybe the biggest news—and something that’s been a long time …

macOS Receives Critical Supplemental Update for MacBook Pro

Following on the heels of Apple’s most recent raft of updates, which included macOS Mojave 10.14.5, the company has released another smaller update targeting specific MacBook Pro users. Apple suggests that all macOS users download and install the new supplemental update in order to take advantage of the latest security protections.

What’s in this latest update? The details aren’t quite clear; after nearly a week since the patch was released, Apple has not updated its online security page with any details. Instead, the company merely said that the update corrects “firmware …

Apple Releases iOS 12.3 and Security Updates to Its Products

The newest array of updates from Apple has arrived, with an array of updates for a variety of products addressing numerous security concerns, some of them serious. While these updates, particularly iOS 12.3, also add several new and exciting features that are sure to please users, there are also new layers of security and fresh bug fixes going into place behind the scenes to keep iPhone users safe. Here’s how the updates break down:

iOS 12.3

More than 40 separate flaws were patched and fixed in this latest version of iOS, though …

Checklist 138: Any Times a Good Time for an Update

A tricky class of vulnerability rises from the grave to trouble us again, one of the world’s most popular communications apps turns out to have a glaring flaw in its code that requires an immediate update to fix, and it’s time again to update your Apple devices — those stories, and all the details you need to know, are right here on today’s show. Here are the stories we’re checking off our list:

Zombies on the ProwlNews of a WhatsApp VulnerabilityA Slew of Updates from Apple

It’s the night of living dead …

iOS 12.2 Patches Majors Security Flaws; Users Should Update Immediately

It seems like only yesterday when Apple was taking Group FaceTime down to give itself time to fix a severe bug discovered by a teenager. In the latest round of updates, iOS received fixes for several bugs as bad or worse than the FaceTime issue that gained a lot of publicity. These, however, Apple kept under wraps until the latest version, 12.2, was ready for release to the public. That means that while no one was likely affected “in the wild” by these issues, it’s imperative to secure your device …

Apple Releases Security Updates for macOS

Apple recently released security updates across many of its products.

Apple Pushes Latest Round of Updates for a Variety of Products

It’s here: the latest round of updates for Apple products has arrived, and it’s a doozy. This series of updates is jam-packed with bug fixes and security updates that iPhone, iPad, and Mac users should all download right away to begin taking advantage of their added safety improvements. Products included in this set of updates are as follows:

Safari (12.1) tvOS (12.2) macOS Mojave (10.14.4) macOS High Sierra (Update 2019-002) macOS Sierra (Update 2019-002) iOS (12.2)

If you are using versions prior to those listed above, it’s time to update. Check your …

iPhone Prototypes Find Their Way to Hackers and Researchers Alike

Have you ever wondered about how hackers or security researchers can figure out where the hidden flaws in iOS lay? For years, that’s been a big question, from concerns about how companies such as Cellebrite and GrayKey found their way into iOS to how researchers were able to examine how the Secure Enclave works. Thanks to a report by Motherboard picked up by Cult of Mac; we now have a better idea of what’s behind it all: internal prototypes somehow stolen from Apple and then re-sold on the gray market.

What …

Google Shares Details about a New macOS Vulnerability

On Friday, March 1, 2019, Google’s Project Zero announced that it had discovered a “high severity” vulnerability in Apple’s macOS operating system. The Project Zero team constantly works to find vulnerabilities in software and code from other companies and developers. When Project Zero does identify a weakness, it notifies the coder or developer behind the software. The developer then has a 90-day window to fix the issue before Project Zero announces the vulnerability to the world. In other words, Apple has known about this issue for a while and has …

Apple Releases a Fix for Group FaceTime Bug — Update Now

After a couple of weeks of uncertainty following the announcement of a severe privacy flaw in one of Apple’s flagship features for iOS 12, a patch nearly entirely dedicated to fixing the problem is available for download. Relevant updates are included in iOS 12.1.4, a Supplemental Update to macOS Mojave 10.14.3, and a minor update to Shortcuts on iOS to version 2.1.3.

Let’s recap how we got here:

A teenager playing Fortnite with his friends sends FaceTime calls to multiple people.In the process, he discovers a bug, easy to execute, that allows …

New Linux Malware Appears, Infects Some Macs Along the Way

While the average user might think their operating system options only go so far as “PC or Mac”, the truth is that there are many more systems running behind the scenes which power a great deal of our digital infrastructure. Linux is one such system, used by hobbyists, computer enthusiasts, and enterprises to power all kinds of servers and back-end systems. Naturally, it follows that there would be malware for Linux too — though it is rarer than most. According to a story making the rounds on ZDNet and BleepingComputer, …

Newly-Discovered Bug in Group FaceTime Inadvertently Allows Eavesdropping

When Apple debuted iOS 12.1 late last year, one of the flagship additions to the system was Group FaceTime. This long-requested feature allows multiple users to enjoy simultaneous face-to-face video chat through FaceTime. However, in the wake of a serious flaw in Group FaceTime that was disclosed this past week, the feature is currently inaccessible on all iOS devices.

At issue is the potential risk for spying on the audio (and in some cases, video) feeds from a phone targeted through the flaw. Unlike many iOS bugs, this one does not …

Latest Round of Security Updates Arrives for Apple Devices

It’s here: the first array of security updates in the new year for everything from macOS to iOS. These updates don’t roll out any brand new bells and whistles or slick new features, but they do address a host of flaws that require a fix. Systems affected by these new updates include:

iOS (new version: 12.1.13)macOS Mojave (10.14.13)Sierra and High Sierra tvOS (12.1.2)Safari (12.0.3)watchOS (5.1.3)

Typically, Apple does not typically disclose extensive details about what specific attacks were possible and addressed by the bug fixes, or loopholes closed in these latest versions. However, …

What’s in Apple’s Latest Security Digest?

Apple recently released a comprehensive set of security updates, affecting devices and applications ranging from the iPhone to the Apple Watch to iTunes to the Apple TV. Below, we have outlined some basic details about these updates, including the devices they are intended for and the security problems they fix.

APPLE-SA-2018-12-06-1 watchOS 5.1.2

This update for watchOS addresses numerous security vulnerabilities that could be exploited to gain or elevate privileges, to execute arbitrary code, to spoof the watch interface, or to present untrusted configurations as verified or trustworthy.

APPLE-SA-2018-12-05-7 Shortcuts 2.1.2

Apple has not …