Apple Close Vulnerabilities In OS X, iOS, Safari, iTunes And WatchOS

Apple has released updates to several products, including Mac OS X, iOS and iTunes, which resolve a large number of vulnerabilities together. In Mac OS X El Capitan 10.11.1 and Security Update 2015-007 are 60 vulnerabilities patched allowing an attacker to execute arbitrary code in the worst case.

This could for example by visiting a malicious website to open a malicious audio file or image, extracting a malicious archive file or processing a malicious font file. Also, an attacker with a "privileged" position network, for example, between the user and the Internet, could execute arbitrary code. Updating via the Mac App Store or the Apple website.

For Mac users, Apple has also fixed a vulnerability in the firmware. Researchers demonstrated in August a worm that can infect Mac firmware. There are several possible vulnerabilities were used. One of the leaks is used by Mac EFI Security Update 2015-002 corrected. The update can be downloaded via the Mac App Store.

IOS

For owners of an iPhone, iPad or iPod Touch iOS 1.9 appeared that 49 vulnerabilities were patched. A number of vulnerabilities in Mac OS X are also available in iOS and make it possible for an attacker to execute arbitrary code eg when visiting a website. The Pangu jailbreak will not work in this version. Update via iTunes and the automatic update feature.

There is also a new version of Safari appeared. Via Safari 9.0.1, Apple has patched nine vulnerabilities allowing an attacker could execute arbitrary code. Appeared for owners of an Apple Watch. WatchOS 2.0.1, where 15 vulnerabilities are resolved.

ITunes

Windows users who have installed iTunes be advised to iTunes 12.3.1 upgrade. Via a man-in-the-middle attack when looking around in the iTunes Store via iTunes arbitrary code can be executed on the system. Further, it was also possible for malicious applications to execute arbitrary code via text files.

Microsoft Tackles Infections By Tesla Crypt-Ransomware

For Windows users against ransomware to protect Microsoft millions of computers on the presence of the Tesla Crypt-ransomware checked. Tesla Crypt is a form of ransomware that appeared in March this year and like other kinds of ransomware encrypts files for ransom.

What Tesla Crypt apart is that it searches for a large number of file extensions to encrypt and this has provided the specific iTunes and computer games. In recent weeks left tens of thousands of Windows users infected with this form of ransomware. In the first half of 2015 would Tesla Crypt and CryptoWall, another notorious ransomware families, more than a half million Windows computers have been infected. The victims of Tesla Crypt  had to pay almost 500 euros to recover their files.

Earlier versions of Tesla Crypt made ​​a mistake, making the files without paying could be decrypted via a free tool from Cisco. However resolved in new versions this error. Although there is a decrease in the number of infections is still Microsoft has decided to malware via the Malicious Software Removal Tool to detect (MSRT) and remove. The MSRT is a virus removal tool built into Windows that every month during the monthly patch cycle is updated with new virus definitions and perform a scan at the same time on the system.

Apple Close 147 Vulnerabilities In OS X, iOS And Safari

Apple yesterday updates to Mac OS X, iOS and Safari released, which fix 147 vulnerabilities added. The biggest update was for Mac OS X. OS X El Capitan (OS X 10:11) Apple also has many new features in addition to fixed 101 vulnerabilities.

Through the vulnerabilities an attacker could execute arbitrary code in the worst case. Also, it appeared to be possible to gain access to keychain items and Safari users to follow as they were using private-browsing. Furthermore, an attacker could intercept via a man-in-the-middle SSL / TLS connections, decrypt SSL traffic and determine RSA private keys.

It is now no longer possible to flash the firmware with a malignant Ethernet Apple Thunderbolt adapter. In addition, it appeared that the "Secure Empty Trash" option to permanently delete files, deleted files are not always permanent. A list of all solved problems on the website of Apple to find. The new OS X version can be downloaded via the Mac App Store and Apple.com.

IOS

Yesterday released a new version of iOS. IOS 9.0.2 fixes a vulnerability allowing someone with physical access to the device photos and contacts could approach, even though the screen lock was active. Due to a problem with the lock screen could these data and files are still accessed. Apple has solved this by limiting the options available on a locked device. The update can be downloaded via iTunes and the Software Update feature.

Safari

In Safari 9 for OS X Mavericks, OS X Yosemite and El Capitan OS X, Apple has fixed 45 vulnerabilities. Through the vulnerabilities an attacker could determine the browsing history of users and Safari Extensions replaced. Due to a problem with the Safe Browsing option users were not warned when they visited a known malicious website. In the worst case, an attacker could execute when visiting a hacked or malicious website arbitrary code on the system. Safari 9 can be downloaded via the Mac App Store.

Adblock Plus For iOS Is Awaiting Approval Apple

The most famous AdBlocker on the internet can come any time, also for iOS, but is still awaiting approval from Apple. That is what the developers of Adblock Plus know. Adblock Plus was previously only available on the desktop and has been downloaded over 300 million times.

With the release of iOS nine are now supported adblockers on the iPhone and iPad. Recently appeared AdBlocker 'Peace' in the App Store and became a huge success until the developer withdrew the app. In their own words the AdBlocker was too rigorous with ad blocking. It was an all-or-nothing approach.

Crystal, another app in the App Store, is selective in its work. "Acceptable ads" are admissible. To this end the AdBlocker use the whitelist of Adblock Plus. Crystal, which is now the best-selling app on iTunes is also recommended by the developers of Adblock Plus, whose own app is expected soon in the App Store.

Apple Closed 164 Vulnerabilities In OS X, iOS, Safari, iTunes, And QuickTime

Apple yesterday evening updates for Mac OS X, iOS, Safari, iTunes, QuickTime, and Mac EFI released that fix vulnerabilities 164 together. Most of the updates, 77 in total, appeared for Mac OS X in the form of OS X Yosemite 10.10.4 and Security Update 2015-005 .

Thus, clearing the logjam attack through these updates, as well as several vulnerabilities which could allow an attacker at worst arbitrary code on the computer. This could for instance by the user to open a malicious zip file. The updates can be downloaded via the Mac App Store or Apple's download site.

IOS

In iOS 8.4 , Apple fixed 33 security vulnerabilities. Through the vulnerabilities could allow an attacker who is between the user and the Internet was to intercept network traffic, execute arbitrary code, external HTML in the Mail app loading, accounts taken over by users to a malicious website visits or perform the logjam attack. For arbitrary code execution, an attacker could use a malicious SIM card. Updating to iOS 8.4 can automatically or manually via iTunes or the Software Update feature.

Safari and Mac EFI

Apple also released new versions of Safari. Safari 8.0.7, Safari 7.1.7 and Safari 6.2.7 fix four vulnerabilities allowing a malicious website could approach the WebSQL database from other websites, visiting a specially prepared website made ​​it possible to hijack accounts, there via a malicious link to a PDF file was embedded in a website cookies could be stolen and the worst could be executed arbitrary code when visiting a malicious website. Updating via the Mac App Store.

Apple also patched the leak making it possible via a malicious app with root privileges EFI firmware to match. Furthermore, among the Rowhammer attack, which investigators DDR3 memory could attack the past. Also EFI Mac Security Update 2015-001 is available via the Mac App Store.

Windows Users

For Windows users also appeared updates. These are patches for QuickTime and iTunes for Windows. iTunes 12.2 for Windows 7 and Windows 8 fixes 39 vulnerabilities could allow an attacker, who was between the user and the Internet, could execute arbitrary code on the computer and the iTunes Store was visited. In QuickTime was the execution of arbitrary code.This, however, had to be opened a specially prepared file. The nine leaks in QuickTime 7.7.7 corrected.

Free Tool Provides Ransomware Victims Files Back

In March this year, there ransomware which focused specifically at gamers and files from popular computer games and gaming platforms like Steam encrypted and iTunes. Initially it was thought that it was a variant of the Crypto Locker ransomware, but the ransomware was eventually named "Tesla Crypt."

Like other ransomware victims must pay a fee to recover their files. Researchers from network giant Cisco, however, have discovered a vulnerability in the applied encryption, which makes it possible for the victims to decrypt without paying their files. The ransomware pretends to use asymmetric RSA-2048 encryption to encrypt files, but actually makes use of symmetric AES encryption.

The researchers also created a decryption utility to decrypt files free of charge. For this the "master key" must still be on the system. This file, called key.dat is in the user's application data directory stores. Users must copy this file to the directory of the decryption tool, and then run the tool, after all files are automatically decrypted. Using the tool is at your own risk, warns Cisco. Users also are advised to first back up their data.

New Ransomware Encrypts Computer Games And iTunes

Researchers have discovered a new form of ransomware that encrypts data from popular computer games like Call of Duty, Minecraft and World of Warcraft, as well as files from iTunes. It is a variant of the Crypto Locker ransomware via a recently patched flaw in Flash Player and a parent leak in IE spreads, let security bromine in a report to know.

For this, use the cyber criminals flash ad banners. An infected banner sends visitors to the website on which it is displayed automatically to another website, where it attempts to infect your computer through vulnerabilities in IE and Flash Player.Remarkably, the banner only users of Internet Explorer and Opera forward.

The attack is successful, the ransomware 185 will encrypt various file extensions. It also includes those stocks of computer games. Something unprecedented as bromine. The ransomware looks for specific games and gaming software directories like Steam, publishers, and development software. What is striking is that there are many "classics" stand between, like Diablo, Fallout 3, Half-Life 2 and WarCraft 3. Also, several online games targeted, including World of Warcraft, Day S, League of Legends and World of Tanks.

Evolution

"Encrypting these games shows an evolution in the crypto-ransomware which cyber criminals focus on niches," said the researchers. According bromine may be that young adults have no important files on their computers and store photos in the cloud. "But most certainly have a Steam account with some games and an iTunes account full of music."

"Even for adults these attacks can be frustrating, as they lose their games with the rest of their personal data." Remarkable about the games that are encrypted that these popular games, but not for games that currently top the list of most played and best-selling games. It is therefore possible that the ransomware maker games has chosen who he likes to play.