Apple Computer has issued a security  update that patches 20 vulnerabilities found in the company's Mac OS X operating system as well as some applications bundled with the OS.
The update was created in response to security flaws reported by researchers and to several viruses that appeared within the past few weeks.
One recent exploit left Safari users exposed to malicious scripts, while other vulnerabilities appeared in Apple's Mail software and iChat messaging application.
Chat Line
Especially of concern in the Mac community recently was a worm, Leap-A, that spread through iChat. The worm replicated itself by sending a file to everyone on a user's buddy list, a popular tactic for instant-messaging worms.
Apple has tweaked security settings to address the problem specifically, so those who are sent suspicious attachments while using iChat will receive a warning stating that they are downloading unknown or unsafe file types.
The same feature, called Download Validation, also will be part of the Mail application. With that program, Apple has closed another hole that attackers could have used to hide a file's type in an attempt to bypass a security screen.
Apple said that the security update fixes both the Leap-A worm problem and several Safari vulnerabilities.
Cautionary Note
Experts say that Mac users should employ the same kind of common-sense caution as those who use other operating systems, including being careful about which e-mail attachments they open.
But, in general, according to Thomas Kristensen, chief technology officer at security firm Secunia, it is unlikely there will be a deluge of viruses targeting the Mac.
"Malware writers love to reach as many people as possible," he said. "They don't want to spend their time creating a virus that targets 1 or 2 percent of users. They prefer Windows, which represents 97 percent of users."
Those who do choose to write viruses for Macs will not see widespread outbreaks because the infection would have to find other vulnerable Mac systems, which is not easy, Kristensen said.
Also preventing mass virus outbreaks is Apple's reaction time in issuing patches and pushing them out to users through an automated-update process.
"Because of all the barriers, it just seems like virus writers won't bother unless they see Macs as some kind of new frontier," said Kristensen. "Even then, few won't want to put in that kind of time and effort."
|
Rackspace: It makes a difference when you focus on support.
House Lawmakers Push Ban on Peer-to-Peer Software
GAO: Los Alamos Computer Security Has Weaknesses
Computer Security Firm Fortinet Plans IPO This Week
Flat Shipments Hurt Dell Despite Increased Earnings
New Pogoplug 'Personal Cloud' Does Social Networking
Apple Tablet Rumored Delayed as Publisher Gears Up
Smartphones: A Bigger Target for Security Threats
FBI Says Hackers Targeting Law Firms, PR Companies