Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Malware & Threats

Apple to Include Auto-Updates in Mac OS X Mountain Lion

The latest version of Apple’s Mac OS X, Mountain Lion, due in just a few short weeks, will come with a rather important security feature – automatic updating.

The news comes from those testing the newest developer preview. Apple has included a new system called OS X Security Update Test 1.0, which will check Apple’s servers daily for the latest security patches.

The auto checking can also be set to run each time a Mac restarts, and any updates that are available will be automatically downloaded and installed.

The latest version of Apple’s Mac OS X, Mountain Lion, due in just a few short weeks, will come with a rather important security feature – automatic updating.

The news comes from those testing the newest developer preview. Apple has included a new system called OS X Security Update Test 1.0, which will check Apple’s servers daily for the latest security patches.

The auto checking can also be set to run each time a Mac restarts, and any updates that are available will be automatically downloaded and installed.

The automatic updates are just one of the security enhancements slated for OS X 10.8. Gatekeeper is the other, and it will restrict the installation of downloaded applications based on their source.

It comes with three settings: users can opt to allow applications to be installed if they are taken from the Mac App Store; the Mac App Store and Identified Developers; or anywhere on the Web. When Gatekeeper was announced in February, Sophos’ Chester Wisniewski said, Apple’s idea is sound, but the implementation is flawed.

“Gatekeeper is essentially a whitelisting technology bolted onto the blacklisting technology it introduced two versions ago. While this will clearly reduce the risk for users who primarily download all of their programs through popular browsers or the App Store, it only addresses the Trojan problem that has been the primary vehicle for delivering malware to OS X,” he explained.  

Advertisement. Scroll to continue reading.

“This one time check, combined with the limitations of what files are scanned from which sources significantly weakens the usefulness of Gatekeeper. The second problem is a common one to all platforms, people. If a user wishes to install something and is blocked from doing so, they more often then not will override the block. It’s human nature,” he adds.

Yesterday, it was learned that Apple had revamped their marketing for OS X when it comes to Mac-based malware.

Flashback, the Mac-based malware that struck in April, led to the creation of a 700,000 node botnet comprised of all Macs. In the end, the malware wasn’t nearly as harmful as some suggested, as it only displayed advertisements – but it did crush the myth of “no viruses on a Mac.” In an apparent response to this, Apple’s Mac OS X website stopped promoting the “It doesn’t get PC viruses” claim, altering it to “It’s built to be safe” instead.

Written By

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing for the latest cybersecurity threats, trends, and expert insights.

Click to comment

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

AI tools connected to Google Workspace can access millions of sensitive emails and files. Join this session to uncover your organization’s risk and learn a framework to manage AI access.

Register

Join as we bring together CISOs, senior cybersecurity executives, practitioners, industry experts, and other security leaders to share practical experience and examine the issues shaping enterprise cybersecurity strategy.

Register

People on the Move

Cequence Security has appointed Russ Schafer as CMO.

Mona Harrington has been named Assistant Director for Cyber Integration at DHS.

iCOUNTER has appointed Mark H. FitzPatrick as CFO.

More People On The Move

Expert Insights

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest cybersecurity news, threats, and expert insights. Unsubscribe at any time.