Apple deploys automatic OS X security update for the first time

By Matthew S. Smith December 23, 2014

apple deploys automatic os x security update first time applered — Image used with permission by copyright holder

If you’re a Mac user you might have noticed something unusual this morning; a pop-up saying “Security Update Installed.” What’s odd about the message is the fact users don’t have to take any action to make it appear. It’s an automatic, mandatory security fix, the first ever pushed by Apple.

The threat which made the fix necessary is a flaw in Network Time Protocol (NTP), a service used to keep a Mac’s system clock synchronized. A buffer overflow exploit became public knowledge last week, and a properly constructed attack using the flaw could remotely execute code on a target system.

Related: Apple’s CEO promises new security after iCloud hack

Google originally discovered the problem, and it was highlighted by a U.S. Government security notification on December the 19th. Why was Google trying to find flaws in Apple’s code? Actually, NTP doesn’t belong to Apple at all. It’s a open-source protocol that’s available to a wide variety of computers, servers and other networked devices. Few security flaws have appeared in the protocol over the years, but any discovered automatically becomes severe because of NTP’s widespread use.

While there isn’t a current, known threat that’s taking advantage of this flaw to target OS X, the severity and ubiquity of the flaw means everyone should update as soon as possible. If you didn’t see the “Security Update Installed” message on your Mac this morning open the Mac App Store and check the Updates section. You should see “OS X NTP Security Update” listed as installed or ready to install.

Image credit: 360b/Shutterstock

Editors' Recommendations

Topics

Apple

Matthew S. Smith

Former Digital Trends Contributor

Matthew S. Smith is the former Lead Editor, Reviews at Digital Trends. He previously guided the Products Team, which dives…

Computing

Will my computer automatically update for daylight saving time?

Edit Widgets screen on a MacBook on a desk.

Daylight saving time ends in the U.S. at 2 a.m. on Sunday, November 5, when those who observe the calendar ritual will set their clocks to "fall back" one hour. This means that areas that follow the practice will "gain" one hour of sleep that day and gain extra minutes of morning daylight each day as winter approaches.

Daylight saving time is practiced in most of Europe, most of North America, and parts of Asia, South America, and Oceania. For regions that observe daylight saving time, it involves changing clocks by one hour in the spring and fall to give people more hours of daylight. Clocks are set to “spring forward” by one hour in the spring to align with daylight saving time and “fall back” by one hour in the fall to reset to standard time.

Computing

How to downgrade from macOS Sonoma to an older version

Apple's Craig Federighi presents new features in macOS Sonoma at the company's Worldwide Developers Conference (WWDC) in June 2023.

Not everyone loves macOS Sonoma (the latest version of macOS) and there are plenty of reasons you might want to go back to an older edition. The latest macOS might be missing key features you previously enjoyed, for example, or it might have compatibility issues with your apps.

Computing

Snapdragon X Elite is a showstopper chip arriving at the worst possible time

Two Qualcomm Snapdragon chips.

While Apple has been making huge strides with its own Mac chips in recent years, we haven’t really seen anything in the Windows world that can match it for both performance and efficiency at the same time. Now, Qualcomm is claiming its upcoming Arm-based Snapdragon X Elite chips can finally do just that -- but there’s a serious catch involved.

According to PC World, Qualcomm demoed the Snapdragon X Elite at its Snapdragon Technology Summit, where the chipmaker claimed that its latest efforts would trounce everything that came before it, in particular Intel’s 13th-generation processors.