Hello and welcome to the Friday, December 1st, 2023 edition of the Sandcent Storm Center's

Stormcast. My name is Johannes Ulrich, and today I'm recording from Jacksonville, Florida.

Apple today released updates for iOS, iPadOS, and MacOS. These updates fix two already exploited vulnerabilities. Both of these

vulnerabilities affect WebKit. The first one we rated moderate is sensitive information

disclosure vulnerability. Apple only provides these one sentence summary, so not really clear what's being disclosed here.

Sometimes it could be sort of information that helps in additional exploitation, or it could be disclosure of browser history or things like that.

The second vulnerability, that's the one we rated critical, again, also in a web kit, and it can lead to arbitrary code exploit execution

if you are visiting a malicious web page. Apple provided these updates only for the latest

versions of iOS, that's 17, and for macOS, that's 14, or Sonomaoma but note that the notes also state that they have seen

this being exploited in the wild against ios before 16.7.1 the current version of ios released

late in october is 16.7.2.

So that version hasn't been exploited yet, but it could be that it's also vulnerable.

We don't really know.

Like I said, the patch only applies to iOS 17 at this point. In the past,

we often have seen Apple later within a couple days or a week or so release updates for older

versions of the operating system. For macOS, this typically also involves an update for Safari

as these are a WebKit vulnerabilities.

So if you're running this older version of iOS macOS, watch out for additional updates,

but it's of course always possible that they are no longer affected.

And while other companies may blame interns for leaving weak passwords and GitHub repositories and cause breaches, our interns are out there fighting a good fight, and John, our handler today, found an interesting sort of gem in a recent diary from one of our undergraduates, Jonah Latimer, who did write about some of the

latest developments of Mirai. And, well, John now followed up on that and how the particular

vulnerability being discussed there was actually, well, really used more and more following that particular new variant of

...