Hello and welcome to the Tuesday, July 25, 2020, 3 edition of the Sansonet Storm Center's Stormcast.

My name is Johannes Ulrich, and today I'm recording from Jacksonville, Florida.

Apple today released updates for iOS, iPad OS, Mac OS, TVOS, as well as watchOS.

Lots of new vulnerabilities being addressed here.

Interestingly, there are new already exploited vulnerabilities that are also being included in this update.

Now, a little bit difficult here to figure out what's exactly new and old, because these updates also do include what was published and fixed earlier with the Rapid Security Response Update about a week ago.

In addition to updates to the operating systems, we also do have an update to Safari, which is specifically created for the older versions of

Mac OS. For Mac OS, the updates are going back to MacOS 11, which is Bigser. For iOS and

iPadOS, we do have updates for 15 and 16. With 16, we are now at version 16.6. So no more third digit because this is also of a major feature update, not just sort of a security update and definitely not one of the rapid security response updates, which of course

only add letters at the end of the operating system version. As usually, there's lots of

overlap here between the different operating systems. Just a couple of highlights here.

Apple's neural engine apparently had a wall on a billy that does allow arbitrary code execution with kernel privileges.

That also affects the other operating systems because pretty much all of the current Apple CPUs do have a neural engine.

So I assume that this is code related to this neural engine.

Find my interesting here, not a huge problem, but apparently some kind of logic issue

that will allow an app to read sensitive location information that's being addressed

here.

Lots of privilege escalation issues in the kernel.

And then, like I said, we do have a second critical or I should say already exploited

vulnerability in Mac OS.

This vulnerability is a kernel vulnerability.

It is being patched in Mac OS, but it's present in all the other operating systems as well.

...