OS X Mavericks update to fix major security flaw in Macs
Apple follows iOS 7 update with Mac OS X Mavericks patch to address encryption issues.

Apple has patched a major security flaw in OS X Mavericks that could allow hackers to intercept users' communications.
The OS X Mavericks v10.9.2 patch fixes a vulnerability that alters the way Mac devices handle encrypted communications, and means critical checks on the validity of a site's SSL certificate are overlooked when users try to establish a secure connection.
As a result, users have been warned to take caution when accessing sensitive web content using unsecured wireless networks until they have a chance to download the fix.
The emergence of the OS X Mavericks v10.9.2 patch comes several days after the consumer electronics giant flagged the existence of the same fault affecting iOS 6 and iOS7 devices.
At the time, details about a similar flaw in OS X Mavericks began to circulate, but a fix for the issue was only published on Apple's support pages yesterday.
The update also reportedly includes improvements to Mail, Messages and Safari apps, and also allows Mac users to participate in FaceTime calls.
In both cases, Apple's security alerts have stopped short of revealing whether the vulnerabilities have been exploited in the wild, or how long the company has been aware of their existence.
Get the ITPro daily newsletter
Sign up today and you will receive a free copy of our Future Focus 2025 report - the leading guidance on AI, cybersecurity and other IT challenges as per 700+ senior executives
Mark Bower, vice president of infosecurity firm Voltage Security, said Mac users should download the patch as quickly as possible.
"This is a major bug that puts users' sensitive data, like login credentials, passwords, email and browsing data at risk," said Bower.
"Users should patch at their earliest opportunity. Until then, users should be very wary of accessing web content that is sensitive, especially on a network that attackers may also be on at the same time which is more often than you might think."
-
AI is helping bad bots take over the internet
News Automated bot traffic has surpassed human activity for the first time in a decade, according to Imperva
By Bobby Hellard
-
Two years on from its Series B round, Hack the Box is targeting further growth
News Hack the Box has grown significantly in the last two years, and it shows no signs of slowing down
By Ross Kelly
-
Leaked Nvidia certificates used to sign malware bypassing Windows detection
News Windows admins are advised to implement custom policies to avoid seemingly legitimate malware making its way into corporate environments
By Connor Jones
-
GoDaddy data breach exposes over 1.2 million customer details
News Attacker had access to admin passwords for over two months
By Danny Bradbury
-
Why is SSL under attack?
In-depth Don't get sidetracked by a storm in the SSL teacup, warns Davey Winder...
By Davey Winder
-
Facebook warns of new Superfish threat
News The fake security certificate used by the Lenovo-installed adware can be re-used by hackers, says social network
By Joe Curtis
-
Who to trust after the VeriSign hack?
In-depth Davey Winder questions what data was stolen from VeriSign and wonders why the company hasn't been more forthcoming.
By Davey Winder
-
SSL under threat as flaw exploited
News Fears over the security credentials of SSL rise after researchers claim to have found a way to exploit a long-known vulnerability.
By Tom Brewster
-
MI6 targeted in DigiNotar hack
News MI6, the CIA and Facebook were all targeted following a hack on certificate authority DigiNotar.
By Tom Brewster
-
Major SSL encryption flaw hits the web
News Tech companies using SSL have some serious work to do to fix a big hole that could leave internet users at risk.
By Asavin Wattanajantra