Apple has release a new batch of security updates and has fixed three iOS zero-days that 'may have been actively exploited' by attackers.
The three zero-days
Apple has patched a critical macOS zero-day (CVE-2021-30657) that has been exploited by Shlayer malware for months and has finally introduced/enabled the App Tracking Transparency feature and policy in iOS, iPadOS and tvOS. Apple has fixed a zero-day vulnerability in macOS exploited in the wild by Shlayer malware to bypass Apple's File Quarantine, Gatekeeper, and Notarization security checks and download second-stage.
Some mainframe programs were written to encode dates as the number of days since a 'zero date' of 1 January 1900, storing them as signed 16-bit binary integers. On 18 September 1989, these programs began to fail, the date being exactly 32,768 (2 15) days since the zero date. Values on and after this day do not fit into a signed 16-bit integer, but overflow and return negative values.
Two of the zero-day vulnerabilities (CVE-2021-1870 and CVE-2021-1871) are logic issues affecting the WebKit browser engine, which may allow a remote attacker to achieve code execution on devices running a vulnerable version of iOS or iPadOS (i.e., those prior to version 14.4).
The third zero-day (CVE-2021-1782) affects the operating systems' kernel. It is a race condition that can be exploited by a malicious application to elevate privileges on a vulnerable iPhone or iPad. CVE-2021-1782 also affects watchOS and tvOS, and has been fixed in the released updates (watchOS 7.3 and tvOS 14.4).
The Outbreak: Day Zero Mac Os 7
An anonymous researcher has been credited with the reporting of all three flaws.
As per usual, Apple has decided not to share specific details about the flaws or the attack(s) they might be used for.
Zero-days exploited
Presumably, the attackers are using one or both of the WebKit flaws to execute an initial malicious payload on targeted devices, then the kernel vulnerability to achieve the necessary privileges to completely compromise the device and spy on targets' activities.
It's unknown whether the attacks are targeted or widespread. Apple has noted that additional details will be available soon. In the meantime, users are advised to update their devices to plug the exploited iOS zero-days.
In the last six months, similar iOS zero-days have been leveraged in targeted attacks flagged by the Google Threat Analysis Group (TAG) and Citizen Lab. The latter found them being used to install NSO Group's Pegasus spyware.
Apple has also released a security update for iCloud for Windows that fixes four vulnerabilities that may lead to arbitrary code execution or heap corruption, and Xcode, its integrated development environment for macOS, which fixes a path handling issue that could allow a malicious application to access arbitrary files on the host device while running an app that uses on-demand resources with Xcode.
iTunes is going places.
Download macOS Catalina for an all‑new entertainment experience. Your music, TV shows, movies, podcasts, and audiobooks will transfer automatically to the Apple Music, Apple TV, Apple Podcasts, and Apple Books apps where you'll still have access to your favorite iTunes features, including purchases, rentals, and imports.
You can always download iTunes 12.8 for previous versions of macOS,
as well as the iTunes application for Windows.
Hardware:
- Mac computer with an Intel processor
- To play 720p HD video, an iTunes LP, or iTunes Extras, a 2.0GHz Intel Core 2 Duo or faster processor is required
- To play 1080p HD video, a 2.4GHz Intel Core 2 Duo or faster processor and 2GB of RAM is required
- Screen resolution of 1024x768 or greater; 1280x800 or greater is required to play an iTunes LP or iTunes Extras
- Internet connection to use Apple Music, the iTunes Store, and iTunes Extras
- Apple combo drive or SuperDrive to create audio, MP3, or backup CDs; some non-Apple CD-RW recorders may also work. Songs from the Apple Music catalog cannot be burned to a CD.
Software:
- OS X version 10.10.5 or later
- 400MB of available disk space
- Apple Music, iTunes Store, and iTunes Match availability may vary by country
- Apple Music trial requires sign-up and is available for new subscribers only. Plan automatically renews after trial.
- OS X version 10.10.5 or later
- 400MB of available disk space
- Apple Music, iTunes Store, and iTunes Match availability may vary by country
- Apple Music trial requires sign-up and is available for new subscribers only. Plan automatically renews after trial.
iTunes
Download the latest version for Windows.
The latest entertainment apps now come installed with macOS Catalina. Upgrade today to get your favorite music, movies, TV shows, and podcasts. You can join Apple Music and stream — or download and play offline — over 75 million songs, ad‑free.
iTunes
Download the latest version from the Microsoft Store.
Hardware:
- PC with a 1GHz Intel or AMD processor with support for SSE2 and 512MB of RAM
- To play standard-definition video from the iTunes Store, an Intel Pentium D or faster processor, 512MB of RAM, and a DirectX 9.0–compatible video card is required
- To play 720p HD video, an iTunes LP, or iTunes Extras, a 2.0GHz Intel Core 2 Duo or faster processor, 1GB of RAM, and an Intel GMA X3000, ATI Radeon X1300, or NVIDIA GeForce 6150 or better is required
- To play 1080p HD video, a 2.4GHz Intel Core 2 Duo or faster processor, 2GB of RAM, and an Intel GMA X4500HD, ATI Radeon HD 2400, or NVIDIA GeForce 8300 GS or better is required
- Screen resolution of 1024x768 or greater; 1280x800 or greater is required to play an iTunes LP or iTunes Extras
- 16-bit sound card and speakers
- Internet connection to use Apple Music, the iTunes Store, and iTunes Extras
- iTunes-compatible CD or DVD recorder to create audio CDs, MP3 CDs, or backup CDs or DVDs. Songs from the Apple Music catalog cannot be burned to a CD.
Software:
- Windows 10
- 64-bit editions of Windows require the iTunes 64-bit installer
- 400MB of available disk space
- Some third-party visualizers may no longer be compatible with this version of iTunes. Please contact the developer for an updated visualizer that is compatible with iTunes 12.1 or later.
- Apple Music, iTunes Store, and iTunes Match availability may vary by country
- Apple Music trial requires sign-up and is available for new subscribers only. Plan automatically renews after trial.
iTunes is going places.
Visit the iTunes Store on iOS to buy and download your favorite songs, TV shows, movies, and podcasts. You can also download macOS Catalina for an all-new entertainment experience on desktop. Your library will transfer automatically to the new Apple Music app, Apple TV, and Apple Podcasts. And you'll still have access to your favorite iTunes features, including your previous iTunes Store purchases, rentals, and imports and the ability to easily manage your library.
Music, TV, and podcasts
take center stage.
iTunes forever changed the way people experienced music, movies, TV shows, and podcasts. It all changes again with three all-new, dedicated apps — Apple Music, Apple TV, and Apple Podcasts — each designed from the ground up to be the best way to enjoy entertainment on your Mac. And rest assured; everything you had in your iTunes library is still accessible in each app. iCloud seamlessly syncs everything across your devices — or you can back up, restore, and sync by connecting the device directly to your Mac.
The new Apple Music app is the ultimate music streaming experience on Mac.1 Explore a library of over 75 million songs, discover new artists and tracks, find the perfect playlist, download and listen offline, or enjoy all the music you've collected over the years. And find it all in your music library on all your devices.
The Outbreak: Day Zero Mac Os Download
The Apple TV app for Mac is the new home for all your favorite movies, shows, premium channels, and Apple TV+. Watch everything directly in the app or enjoy it offline, and discover the best of what's on in the Watch Now tab. You can even pick up where you left off on any screen, across all your devices. And for the first time, 4K2 and Dolby Atmos3-supported movies are available on Mac.
More than 700,000 of the best entertainment, comedy, news, and sports shows are now available on your Mac with Apple Podcasts. Search for podcasts by title, topic, guest, host, content, and more. Subscribe and be notified as soon as new episodes become available. And in the Listen Now tab, you can easily pick up where you left off across all your devices.
iTunes Support can help answer your questions
Get help with syncing, updating to a more recent version of iTunes, or with an iTunes Store purchase — and much more.
Learn moreLooking for a previous version of iTunes?
Download earlier versions of iTunes to work with compatible operating systems and hardware.
Find previous versions of iTunes