Hello, welcome to the Monday, June 4th, 2018 edition of the Sands and its Storm Center's Stormcast. My name is Johannes Ulrich and I'm recording from Augusta, Georgia. So as predicted on Friday, we got also updates from Apple 4 OS10 and Mac OS. In addition, we got the usual patch for Safari.

Also, patches for ICloud for Windows.

And with having released the full set of security updates, Apple also released details about

the security content of all these updates, including the updates released on

Thursday for iOS, watchOS, and TVOS.

As usual for Apple updates, and that again is why they usually hold back some of the details

until they released updates for all the operating systems.

There is a lot of overlap

between these different updates. Particular web kit vulnerabilities, of course, show up in all the

different operating systems. For OS 10, the details about the web kit vulnerabilities are split

out into the Safari update, so you won't see them in the OS10 details.

Among the more interesting vulnerabilities, one issue was fixed that would allow an attacker to modify the EFI bias.

Now, the hacker would need already root on the system in order to affect this, but then again, this is sort of the holy grail of actually getting persistence on a system.

Secondly, the e-fail vulnerability was patched in mail, so have to see exactly how they patched it, in particular

for S-Mine, which is really the only thing that mail does support out of the box. PGP is not

supported by mail, so that's probably not addressed here. And a message bug was fixed that was already exploited in the wild.

This particular message bug led to the null of service vulnerability with iOS. So far I haven't really heard about any problems with this update, but in particular for OS10, this update apparently does take quite a while

to apply, and that sort of matches my own observation can take up to an hour to apply this

particular update. And of course, last week everybody reported how the VPN filter malware

is taking over routers and how the FBI is

advising users into rebooting these routers to get rid of the malware. Haven't seen any numbers on how

successful this particular effort was, but the assumption here was that with the command control server being offline,

...