Apple has just released bash updates for OS X 10.9 Mavericks, OS X 10.8 Mountain Lion and OS X 10.7 Lion. These can be downloaded and installed by all users concerned by the well-documented Shellshock vulnerability, which has caused quite the stir over the past few days. We've all of the details, along with those all-important download links, right here.
A while back, when the world was made aware of the Heartbleed bug, there was hue and cry all over, mainly because the bug was discovered in a system that was widely used and implemented across the Internet. Today, a new threat has surfaced that's perhaps bigger than Heartbleed. Labeled the Bash bug - or Shellshock - the new vulnerability affects almost all Linux and Unix based systems, as the vulnerability exists in the Bash command that's widely implemented in Unix systems. The good news, at least for Mac OS X users, is that Apple is actively working to patch it and release a fix that can put users' minds at ease.
Despite the stringent measures being put in place by software makers far and wide, large-scale security breaches remain a black cloud over modern technology, and today, a Russian Bitcoin site has leaked a total of 5 million Gmail addresses and passwords. Initially, it was suspected that the leaks were of passwords specific to the Gmail account in question, although now, it seems that the credentials have been snatched from external websites of users who signed up using a Google email.
Given the recent spate of celebrity phone compromising, allied to the fact that Apple is about to roll out its new mobile payment system with iOS 8 and the new iPhone 6 / 6 Plus, and it's fair to say that these are testing times for the company. From a security point of view, the Mac maker will want to avoid any more high-profile gaffes as it looks to win the trust of the consumer market, and although the new iOS 8 GM has fixed some vulnerabilities first highlighted by a seasoned security researchdf, a few still continue to linger.
The security of Apple's iCloud servers has had some considerable focus of late after a host of celebrities had their accounts raided and personal, intimate photos of them distributed online. After initially appearing to have been hacked, iCloud suffered quite the bloody nose over the incident.
This week's headlines have been dominated by yet another incident regarding the compromising of mobile devices, with several celebrities and news outlets having outlined Apple's iCloud as the wrongdoer in this particular sequence of events. But while, after an internal investigation, the Cupertino company has since stepped out and inferred that private photos wouldn't have leaked out if two-step verification were present, one reporter has done a little digging of his own, and found that in certain pockets of the Web, folks are using law enforcement tools to snatch iCloud backups of unwitting victims.
Mobile security is very much in the news right now and for obvious reasons, with some celebrities having had some of their most compromising photos and video pop up online following an apparent iCloud security breach. Whether it is an actual security breach or simply the result of poor password choices, the incident has many considering the security of their data.
Big breaches of security are never fun, but when you're the provider of cloud storage that holds all kinds of personal data, things can get particularly hairy when someone finds a way through. That's the situation Apple finds itself in today, or at least, that's the claim.
Theft of personal, digital devices is fairly rampant, but thanks to the introduction of kill-switches, those snatching the gadgets of others are now often left with a bricked product that cannot be used or sold at will. It's not much consolation to the victim, but it has made a noticeable difference to smartphone theft in that the numbers have dropped off significantly. Now, a new law has been passed in California that means by 2015, any handset sold in the state will need to be kitted up with its very own kill-switch, and although most top-end devices now ship with such measures right out of the box, this new move will ensure that all new smartphones include something similar.
Andrei Neculaesei, a full-stack Copenhagen based developer, has thrown his hat into the mobile app security debate by expressing concern regarding poorly implemented security relating to URI schemes within many popular apps. Neculaesei believes that the fact that many developers neglect to implement vital security measures within their apps could potentially lead to unwitting users falling victim to malicious services that could, in theory, invoke expensive phones calls on the device being used.
















