Retail News CRM

Tag: 16.6

  • Apple releases iOS 16.6 to patch several software flaws some of which have been actively exploited

    Apple releases iOS 16.6 to patch several software flaws some of which have been actively exploited

    Apple has released iOS 16.6 for the iPhone and iPadOS 16.6 for, well, the iPad. The updates will patch several vulnerabilities including one that impacts the Apple Neural Engine. The latter delivers on-device natural language processing and image analysis faster and with more energy efficiency than the CPU or GPU. Apple says that an app might be able to  execute arbitrary code with kernel privileges which means an attacker could run any command on a targeted iPhone or iPad.

    This patch is heading to iPhone 8 and later, iPad Pro (3rd generation) and later, iPad Air (3rd generation) and later, and iPad mini (5th generation). A vulnerability on the Find My app could allow sensitive location information to be divulged via an app. This patch will be available to the iPhone 8 and later, iPad Pro (all models), iPad Air 3rd generation and later, iPad 5th generation and later, and iPad mini 5th generation and later.

    Several patches for the Kernel are part of the update. This is the core part of an operating system. With one flaw, Apple says it is aware of reports that the vulnerability has been actively exploited on versions of iOS released before iOS 15.7.1. With this vulnerability, “an app may be able to modify sensitive kernel state” allowing the attackers to manipulate how the operating system runs.

    Other possible attacks against the iOS and iPadOS kernels listed by Apple include one that could allow the attackers to elevate privileges giving them the ability to do more than standard users. Another flaw could lead to a denial-of-service attack that could prevent users from accessing the features and apps they want to use. And another vulnerability can give an attacker root privileges. This could allow an attacker to create a backdoor, add a trojan, or delete any information on an iPhone or iPad.
    There are two vulnerabilities listed for the WebKit browser engine including one that has been actively exploited according to reports that Apple has become aware of. With these security issues, it is a good idea to install the update now. Go to Settings > General > Software Update and follow the directions. Other updates available today include watchOS 9.6, macOS 13.5, and tvOS 16.6.
    Lees ook:

    Lees ook:

  • The final version of iOS 16.6 is just days away

    The final version of iOS 16.6 is just days away

    Apple can’t wait to get iOS 16.6 out, especially in light of the issues that caused it to try three times to patch a serious WebKit vulnerability in iOS and iPadOS 16.5. Apple was aware of reports that said the flaw was being actively exploited and could cause arbitrary code execution which would allow an attacker to steal your personal data. So out went iOS 16.5.1 and iPadOS 16.5.1. But before you could spell Cupertino, Apple pulled both releases because of some bugs found in the software.
    Using its Rapid Security Response system, instead of developing iOS 16.5.2 and iPadOS 16.5.2, Apple released iOS 16.5.1 (a) and iPadOS 16.5.1 (a). But the two updates changed the user agent for mobile Safari. The user agent tells the server all about a device’s browser so it knows what version of the content to serve. For example, it tells the server whether to show the mobile or desktop version of a website or the U.S. or U.K. version of a site. The bugs also prevented iPhone and iPad users from accessing sites like Zoom, Facebook, and Instagram.
    Knowing how serious the vulnerability affecting WebKit was, Apple pulled iOS 16.5.1 (a) and iPadOS 16.5.1 (a) and quickly replaced them with iOS 16.5.1 (c) and iPadOS 16.5.1 (c) and that is where we stand at the moment. However, the Release Candidate for iOS 16.6 was released to developers today which means that update is probably less than a week away. The Release Candidate builds give beta testers the opportunity to test the final build of an update before it is released to most users. Apple continues to split its resources between the remaining builds of iOS 16 and the iOS 17 beta which should end in September with the release of stable iOS 17.
    Besides the Release Candidates for iOS 16.6 and iPadOS 16.6, Apple dropped the Release Candidates for watchOS 9.6, macOS Ventura 13.5,  and tvOS 16.6. All of the updates’ release notes indicate that they will fix minor bugs found on the various OS builds.
    You can check for the new update on your iPhone or iPad by going to Settings > General > Software Update. When the update arrives, you will be prompted to press the appropriate buttons. For the Apple Watch, open the Watch app on your iPhone and tap the My Watch tab at the bottom of the screen. Go to General > Software Update. On Apple TV go to Settings > System > System Update.
    Lees ook: