If you own an iPhone, Mac, or iPad – you need to update it today.
Apple has pushed-out an update to its iOS and macOS operating systems which includes a number of important security fixes.
The latest operating system updates include further fixes for the Meltdown and Spectre vulnerabilities discovered in modern processors.
Apple addressed some of the vulnerabilities present in modern silicon in its previous software updates.
Spectre is a flaw present in a number of modern chipsets, including AMD and ARM.
Meanwhile, Intel processors contain a vulnerability dubbed Meltdown, which could leave sensitive data open to hackers.
The flaw enables normal users applications, as well as JavaScript in web browsers, to bypass the access protections built into the kernel and ascertain the layout or contents of protected kernel memory areas.
Kernels in operating systems have complete control over the system.
It is the Kernel that connects applications to the processor, memory, and other hardware built into the computer.
Kernels also contain a memory space hidden from user processes and programs that houses password data, login keys, files cached from disk, and so more sensitive data.
Apple says there have been no known instances of cybercriminals taking advantage of the flaw.
The Cupertino-based company has pushed-out a number of key operating system updates to fix these vulnerabilities.
iPhone 5s and newer, iPad Air and later, and sixth-generation iPod Touch owners should download iOS 11.2.2.
Those running macOS should update to High Sierra 10.13.2 to patch the flaws in the processor.
Apple published a blog post about the Meltdown and Spectre vulnerabilities earlier this month.
“All Mac systems and iOS devices are affected, but there are no known exploits impacting customers at this time,” the US company shared on its site.
“These issues apply to all modern processors and affect nearly all computing devices and operating systems.”
Meltdown does not affect Apple Watch, since the flaw is present in Intel processors, which are not used in the wearable.
Google and Microsoft have also issued updates to address the vulnerabilities.
Daily Express :: Life and Style Feed
