X

Mac and iOS users, here's how to install that major security fix

Get the update for a security hole that allows third parties to intercept and modify activity on iOS and OS X Mavericks devices. This is an update you can't afford to ignore.

Sharon Profis Vice President of Content, CNET Studios
As the Vice President of CNET Studios, Sharon leads the video, social, editorial design, and branded content teams. Before this role, Sharon led content development and launched new verticals for CNET, including Wellness, Money, and How To. A tech expert herself, she's reviewed and covered countless products, hosted hundreds of videos, and appeared on shows like Good Morning America, CBS Mornings, and the Today Show. An industry expert, Sharon is a recurring Best of Beauty Awards judge for Allure. Sharon is an avid chef and hosts the cooking segment 'Farm to Fork' on PBS nationwide. She's developed and published hundreds of recipes.
Credentials
  • Webby Award ("How To, Explainer, and DIY Video"); Folio Changemaker Award, 2020
Sharon Profis
2 min read

Screenshot by Sharon Vaknin/CNET

Grab your iOS and OS X devices -- this is a security update you can't afford to ignore.

According to a study by Chitika released yesterday, only 25.9% of users have updated their operating system with a bug fix that prevents third parties from intercepting and fiddling with activity on an iOS device.

More specifically, without the update, the system does not check SSL/TLS hostnames, so connections that should be encrypted are left wide open.

The same security hole is also apparent in systems running OS X Mavericks.

iOS devices (all iPhone, iPad, and iPod Touch devices)
By now, a pop-up notification should have appeared on your phone, alerting you to update the system. But, if you ignored it, or never received it, here's how to find it:

Go to Settings > General > Software Update. Those running iOS 7 will see the 7.0.6 update, while those running iOS 6 on older devices (including the iPhone 3GS and the 4th-gen iPod Touch) will see the iOS 6.1.6 update. Tap "Install Now" to get the update.

Once you've updated, the Software Update screen will indicate that "Your software is up to date."

Mac OS X Mavericks
iOS wasn't the only system affected by this security hole. Apple also released an OS X Mavericks system update Tuesday that patches the same hole that allows "an attacker" to "capture or modify data" transferred with Safari, Mail, iCloud and other Apple-created applications, according to Apple.

On Mavericks, system updates are conducted through the Mac App Store, but you won't find the system update by launching it. Instead, open the Mac menu (the Apple logo), and click "Software Update."

The Mac App Store will launch, and you'll see the system update, along with other app updates. Choose to update the Software Updates, or click "Update All" to install all listed updates, including apps.