Hello and welcome to the Tuesday, May 12, 2006 edition of the Sands In The Net Storm Center's Stormcast.

My name is Johannes Ulrich, recording today from San Diego, California.

And this episode is brought you by the sands.edu credit certificate program in

penetration testing and ethical hacking. Today we got, well, one of Apple's typical patch days.

Now, Apple does not have a regular patch schedule. This particular update was kind of expected

for this week. Not sure if anybody would predict that Monday as being the patch day for Apple.

It again affects pretty much all of their operating system and fixes about 80 different flaws.

The flaws are not really all that remarkable. It's your usual mix kind of for Apple.

Also, based on what we historically get from Apple, the number of patches is just about

average. So there is no sign of like any inflation, as we have seen in some cases, with

AI generated patch vulnerability reports.

For iOS, iPadOS, you'll get updates for the 26 as well as for the 18 version, so the

current and the next to current version.

From macOS, it goes back two versions, so all the way to macOS, Sonoma, 14, TVOS, watchOS,

and mission OS only get updates for the current version of the operating system.

In addition to the security updates, there's of course always a number of features that are being

updated with these

sort of in-between operating system releases from Apple. There is one particular feature that is

kind of of interest from a security point of view, and that's end-to-end encrypted RCS messaging.

RCS is the standard that's supposed to eventually replace SMS,

and initial versions released by Apple and Google were more focusing on some of the usability issues,

like, for example, markup and the like. But of course, one of the big problems with SMS from a

...