Mystery Apple security update sparks speculation

Keeping shtum

However, despite an update having gone out to users earlier this week, Apple’s security update page has yet to be updated – at the time of writing, it had not been updated since 12 April.

Similarly, no wider information has been published about any issues affecting Apple devices, although Citizen Lab, the Canadian investigative organisation that exposed the malicious activity of Israeli spyware manufacturer NSO Group and its customers, recently released information revealing that NSO is still developing and exploiting new exploits against Apple devices.

Michael Covington, strategy vice-president at Jamf, said whatever the Rapid Security Response update fixed, the benefits of the new programme far outweighed the lack of clarity.

“These updates contain software fixes to address critical vulnerabilities in the underlying operating system. By restricting these patches to just security fixes, Apple is reducing the amount of code it must develop and test, the time between updates, and the overall size of the patch that each device must download. Overall, this reduces the window of exposure and helps to neutralise exploits that are putting users and organisations at risk,” he said.

“Keeping up-to-date with the latest patches is one of the most effective ways to safeguard devices against cyber threats. Apple’s Rapid Security Response programme makes it simpler and less disruptive for users and administrators to apply necessary updates and ensure that their devices are secure,” he added.

“However, it’s not enough for Apple to provide faster security updates; it’s equally important for the public to understand the significance of applying operating system updates,” continued Covington.

“Shockingly, in 2022, one in five devices ran on an outdated operating system. Therefore, it’s essential for users to be a part of the cyber security strategy and take prompt action when prompted to update their devices.”

At the same time, multiple users of Apple devices complained at first that they could not accept the update.

Among them was Paul Ducklin, principal research scientist at Sophos, who on Monday 1 May wrote that while the update downloaded without issue on an iPhone, he then saw a notification and a popup saying the update failed because he wasn’t connected to the internet, despite being connected to the internet and browsing email at the time.

Staffers at The Verge, a technology magazine, reported the same problem, as did multiple posters on social media sites such as Reddit and Twitter.

At the time of writing, Apple does seem to have successfully fixed this issue, suggesting it was merely a temporary glitch.