CONNECT WITH US
Apple

Apple

Apple Addresses Web Security Threat, Working on macOS Update With Additional Fix

MacRumors - Apple logo

Published on

Add as a preferred source on Google
Apple Addresses Web Security Threat, Working on macOS Update With Additional Fix

Earlier this month, a security researcher discovered that private cryptographic keys associated with eight of Indian company eMudhra's intermediate certificate authority (CA) certificates were weak. The compromised keys could have allowed attackers to impersonate legitimate websites, potentially putting users' sensitive information at risk. However, there is currently no evidence that the keys were exploited maliciously. eMudhra's certificates were widely trusted by all major web browsers, including Safari, Chrome, Edge, and Firefox, but Apple and the other companies behind those browsers have since taken action to protect users. In a support document , Apple said it has been blocking eMudhra's compromised TLS web certificates since October 19 in Safari, Mail, and apps that use Apple's networking and security frameworks. The certificates are blocked automatically with no software update required, so most Apple device owners do not need to take any action. There is one exception. Apple said those who use macOS command-line tools, such as system administrators, should be aware that some of those tools can still accept the compromised certificates until Apple releases a macOS update with a fix. In the meantime, Apple said those who use command-line tools can remove root CA certificates from the /etc/ssl/cert.pem file, with more details outlined in the support document. Apple has not provided a release date for the macOS update that will include the necessary changes to the /etc/ssl/cert.pem file by default. For more technical details, read Apple's support document . Tags: macOS Security , Safari

This article, " Apple Addresses Web Security Threat, Working on macOS Update With Additional Fix " first appeared on MacRumors.com Discuss this article in our forums


Source link
Related Topics:Apple

Disclaimer

We strive to uphold the highest ethical standards in all of our reporting and coverage. We TheMorningPulse.fyi want to be transparent with our readers about any potential conflicts of interest that may arise in our work. It's possible that some of the investors we feature may have connections to other businesses, including competitors or companies we write about. However, we want to assure our readers that this will not have any impact on the integrity or impartiality of our reporting. We are committed to delivering accurate, unbiased news and information to our audience, and we will continue to uphold our ethics and principles in all of our work. Thank you for your trust and support.