Apple issues fix for security risk - KYTX CBS 19 Tyler Longview News Weather Sports

Apple issues fix for security risk

Posted:

By Gregory Wallace

NEW YORK (CNNMoney) -- Security experts say Apple has patched a hole that could have exposed sensitive information to hackers.

Left unfixed, hackers could potentially read private communications sent over Apple devices: emails, instant messages, social media posts and even online bank transactions.

But experts say it's unlikely any hackers did, since the vulnerability was first disclosed when Apple released a security patch over the weekend.

The patch fixes the issue in the most recent software available for iPhones, iPads and iPod Touches.

A fix is not yet available for the OS X software, the operating system for Apple computers.

Without the patch, a hacker could be what experts call a man-in-the-middle -- it's like a game of Telephone you don't even know you're playing.

"Alice wants to communicate securely with Bob," explained Nathan Sportsman, a mobile security expert and CEO of Praetorian. But Eve, a hacker, uses this vulnerability to put herself between the two. "Now Alice is talking to Eve and Eve is talking to Bob," he explained. Alice and Bob think they're talking to each other privately.

This lets hackers view the communications, such as bank deposits or Facebook posts. If they intercept a username and password, the hacker could return to your account later and cause more damage, Sportsman said.

Hackers can also modify the transmission, said Dmitri Alperovitch, the chief technology officer at the security firm CrowdStrike.

For the most part, Alperovitch said, the hacking ability is limited to people who are on the same network as the hacker -- such as in a coffee shop or on an airplane.

He said Apple users should make sure their device is updated with the newly issued software before next connecting to a public wireless network. He recommended owners of Apple computers wait until an update is available before using it on a public network.

And if you're already tapped into an insecure network, sign off, then perform the update, Alperovitch said. Otherwise hackers could corrupt the update as it travels to your phone.

 

The-CNN-Wire

™ & © 2014 Cable News Network, Inc., a Time Warner Company. All rights reserved.

 

  • Local NewsMore>>

  • Three more defendants plead guilty in 2013 Tyler Motel murder

    Three more defendants plead guilty in 2013 Tyler Motel murder

    Friday, August 22 2014 6:27 PM EDT2014-08-22 22:27:00 GMT
    Three defendants in a 2013 murder pleaded guilty and avoided a trial Friday.More >>
    Three defendants in a 2013 murder pleaded guilty and avoided a trial Friday.More >>
  • Report: Flint girl's hot car death accidental, dad drug-free

    Report: Flint girl's hot car death accidental, dad drug-free

    Friday, August 22 2014 6:24 PM EDT2014-08-22 22:24:35 GMT
    Russel Lindstrom, charged with manslaughter in the hot car death of his young daughter was in court Friday morning for a bond-reduction hearing.More >>
    Russel Lindstrom, charged with manslaughter in the hot car death of his young daughter was in court Friday morning for a bond-reduction hearing.More >>
  • Web Exclusive: New law on inheriting online accounts

    Web Exclusive: New law on inheriting online accounts

    Friday, August 22 2014 9:51 AM EDT2014-08-22 13:51:58 GMT
    When someone dies, often their online identity dies as well. A new law in one state, however, is looking to change that.  Think about all of the online footprints and accounts you've made.More >>
    When someone dies, often their online identity dies as well. A new law in one state, however, is looking to change that.  Think about all of the online footprints and accounts you've made.More >>
Powered by WorldNow

CBS19, MYTX & KCEB
2211 ESE Loop 323
Tyler, TX 75701
Phone (903) 581-2211
Fax (903) 581-5769

Powered by WorldNow
All content © Copyright 2000 - 2014 WorldNow and KYTX. All Rights Reserved. Users of this site agree to the Terms of Service, Privacy Notice/Your California Privacy Rights, and Ad Choices.