Hello and welcome to the Wednesday, March 6, 2020,

edition of the Sansonet Storm Center's Stormcast.

My name is Johannes Ulrich, and today I'm recording from Jacksonville, Florida.

Apple today released a surprise update for iOS and with that also for iPad OS. Unlike usual for Apple, we only got updates for this operating system, not for any others like MacOS, and we also only got four vulnerabilities patched here, which is low for a somewhat major update. It's the update to 17.4 from 17.3. So this is a feature

update in addition to a small security update. Now I'm saying small because it only has

four vulnerabilities being patched here. Two of the vulnerabilities, however, are already exploited.

One of the vulnerabilities is also exploited on the older iOS 16, which also received an update

today.

These already exploited vulnerabilities are essentially privileged escalation vulnerabilities, so we only rated them as moderate so far.

There's a third vulnerability that we rated as moderate.

It only affects private browsing and may make some tabs briefly visible.

So basically if you hand your iPad to another user, they may briefly see your

private browsing tabs. The fourth vulnerability, also moderate, is another sort of privacy issue

that basically just redacts some additional data from logs. Interestingly, there was also an update for iOS

15, but according to Apple,

that update did not fix any security vulnerabilities, so not clear if this one vulnerability

that was patched in iOS 16 just didn't affect iOS 15 or if a patch will come later.

And in today's diary, I took a quick look at some of the logs we are having that indicate attacks or scans for perimeter security devices.

Of course, over the last few years, we had numerous critical vulnerabilities in perimeter

security devices, in particular also these enterprise

secure devices, like for example, your Citrix, Evanti, and these various products, not just

the home routers, which of course always for a long, long time, were sort of a prime target.

...