For example, ZecOps explains that with iOS 12, an attacker requires the iPhone user to open a malicious email. In addition, not only did ZecOps find that the attacks can happen without an iPhone owner’s knowledge but triggers have been happening for more than two years, with the first trigger subsequently detected back in January 2018.Īnd there’s a further kicker: ZecOps found that the attacks are easier to perform on iOS 13 than previous generations of iOS. So what are we dealing with? What ZecOps discovered is a serious vulnerability in Apple’s iOS Mail app which allows an attacker to remotely infect an iPhone and gain control over their inbox. I expect pressure will mount for the company to do so.
#Apple mail update Patch#
The bigger question, however, is whether Apple will patch older iPhones which do not support iOS 13.
#Apple mail update update#
Given the remarkably wide potential impact of this iOS vulnerability, I put these questions directly to Apple but the company has declined to comment on them saying it is " not adding anything beyond the statement at this point." Despite this silence, I expect Apple to accelerate up the next iOS 13 release and would not be surprised if an update arrives early next week, now the vulnerability is in the open. Is Apple planning to improve forensics information so people will be able to analyze their devices more accurately and continuously (without physical connection to the device) ? Following previous evidence of remote attacks happening in the wild on iOS users in multiple cases (Pegasus, Google TAG discovery, etc). How has Apple confirmed that all of these triggers are not malicious?ģ.
:max_bytes(150000):strip_icc()/010-transfer-apple-mail-to-new-mac-2260915-a8f21ae9da164a78979114b040385fc3.jpg "apple mail update")
How many triggers were there for this vulnerability (both malicious and non malicious) since iOS 6?Ģ. Avraham states these are critical points Apple must address with regards to the discovery:ġ. We value our collaboration with security researchers to help keep our users safe and will be crediting the researcher for their assistance."Ġ4/26 Update: In an exclusive interview with me, ZecOps CEO Zuk Avraham has pushed back against Apple's statement downplaying the iOS Mail vulnerability in iPhones.
#Apple mail update software#
These potential issues will be addressed in a software update soon. The researcher identified three issues in Mail, but alone they are insufficient to bypass iPhone and iPad security protections, and we have found no evidence they were used against customers. We have thoroughly investigated the researcher's report and, based on the information provided, have concluded these issues do not pose an immediate risk to our users. In an official statement, the company played down ZecOps' findings, saying: " Apple takes all reports of security threats seriously. You can find listings of Apple’s security updates on its support site.Following the publication of a devastating report from security firm ZecOps (covered here by Forbes ), which claimed that every iPhone running a version of iOS 6 or newer is vulnerable to remote attacks, Apple has now confirmed the problem is real.Ġ4/25 Update: Apple has now gone a step further in talking about this security breach and it has met a controversial response. If your phone hasn’t notified you about the update yet, you can find it by going to Settings > General > Software Update. Other fixes in the release notes, according to 9to5Mac, include problems that could keep camera previews from displaying on iPhone 7 and 7 Plus, keep iPhones from connecting via Wi-Fi, and could keep images from appearing in the News widget, among others. Now, when you set your preferred browser defaults to Google Chrome, Firefox, or Microsoft Edge, or your mail defaults to Gmail, Outlook, or Spark, they should stay that way, even after a restart. The Apple Watch will also update to 7.0.1. Today, Apple has taken care of that with its first updates for the iPhone and iPad, bringing them up to 14.0.1. However, users who tried this out were finding that, after they restarted their device, the default would reset to Mail or Safari. One of the nice new features of iOS 14 was the ability to set your own default mail and browser apps.
0 kommentar(er)
