cyber.hendryadrian.com
Security News · darkreading.com

Apple Shifts to Faster Out-of-Band Security Updates Amid AI-Accelerated Threats

· Original article ↗

Summary

Apple is moving toward more frequent, out-of-band security updates for its devices and Safari. Experts say faster patches may help address AI-accelerated vulnerability exploitation, but delayed installs and limits in iOS security tools remain concerns.

Key points

  • Apple released June 29 security updates for iPhones, iPads, MacBooks, and Safari outside major OS releases.
  • Apple said the updates were not for vulnerabilities known to be actively exploited.
  • Apple said AI-assisted development of malicious tools motivated reducing the time between public updates and delivery to customers.
  • Rocky Cole cited Mandiant time-to-exploit findings, saying attackers now often weaponize flaws before patches are public.
  • Cole said faster patching is limited if users delay updates; he described a Coruna infection involving a person still using iOS 16.
  • Cole argued that iOS lacks a third-party security framework comparable to EDR or XDR, particularly limiting enterprise defenses.

Article Details

Event Type
Apple is shifting toward more frequent out-of-band security updates rather than relying mainly on large bundled OS releases.
Impact
The change is intended to shorten the time between public patch release and delivery to customers. Apple said none of the June 29 updates addressed actively exploited vulnerabilities. The article reports that users may delay updates, and Rocky Cole argues that faster patching alone does not address iOS's lack of a robust third-party security framework.

People

Rocky ColeCEO of iVerify and a security expert who discussed AI-accelerated vulnerability discovery and patching. He said his team found around a dozen bugs while testing emerging models through OpenAI's Trusted Access for Cyber program, and that Apple acknowledged one as a CVE; the CVE identifier is not provided.

Malware

CorunaCole recalls how “we just saw a Coruna infection last week, from someone still on iOS 16.

Vendors

AppleApple is shifting to faster, out-of-band security updates for iPhone, iPad, MacBook, and Safari to shorten the window between patch release and delivery as AI accelerates vulnerability discovery and exploit development.

Products

iOSSecurity experts say the change is necessary but still insufficient because many users delay updates, iOS lacks a robust third-party security framework, and attackers are now weaponizing flaws before patches are public.iPadApple is shifting to faster, out-of-band security updates for iPhone, iPad, MacBook, and Safari to shorten the window between patch release and delivery as AI accelerates vulnerability discovery and exploit development.iPhoneApple is shifting to faster, out-of-band security updates for iPhone, iPad, MacBook, and Safari to shorten the window between patch release and delivery as AI accelerates vulnerability discovery and exploit development.MacBookApple is shifting to faster, out-of-band security updates for iPhone, iPad, MacBook, and Safari to shorten the window between patch release and delivery as AI accelerates vulnerability discovery and exploit development.SafariApple is shifting to faster, out-of-band security updates for iPhone, iPad, MacBook, and Safari to shorten the window between patch release and delivery as AI accelerates vulnerability discovery and exploit development.

Related Articles