Alert: Apple Security Updates – March 2023

Apple has released security updates to backport patches released last month, addressing an actively exploited zero-day bug for older iPhones and iPads.

The released security updates fix zero-day vulnerabilities:

• CVE-2023-23529

Security Risks

Malicious actors can exploit the zero-day vulnerabilities by remotely executing malicious code and taking control of an unpatched Apple device.

For the full list of security updates released by Apple, please refer to Apple Security Updates.     

Recommended Actions

The National Cyber Security Authority (NCSA) recommends users and system administrators to:

1. Upgrade, as soon as possible, to the latest supported version of installed Apple software in order to continue receiving technical support and security patches.

The released software versions to upgrade to are the following:

• iOS 16.4 and iPadOS 16.4: for iPhone 8 and later, iPad Pro (all models), iPad Air 3rd Gen. and later, iPad 5th generation and later, and iPad mini 5th Gen. and later.
• macOS Ventura 13.3 for all Mac running macOS Ventura.
• macOS Monterey 12.6.4: for all Mac running macOS Monterey.
• macOS Big Sur 11.7.5 for all Mac running macOS Big Sur.
• iOS 15.7.4 and iPadOS 15.7.4: for iPhone 6s (all models), iPhone 7 (all models), iPhone SE (1st Gen.), iPad Air 2, iPad mini (4th Gen.) and iPod touch (7th Gen.).
• WatchOS 9.4 : Apple Watch Series 4 and later
• tvOS 16.4 : Apple TV 4K (all models) and Apple TV HD
• Safari 16.4:  macOS Big Sur and macOS Monterey
• Studio Display Firmware Update 16.4: macOS Ventura 13.3 and later.

2. Enable background updates or automatic updates

3. Before any update task, ensure you have backup for your data.

For further information and support, please contact the National Cyber Security Authority (NCSA) by emailto rwcsirt@ncsa.gov.rw or call us on 9009.

References

Apple Security Updates