Apple’s website to learn that Apple has added a new Common Vulnerability Disclosure (CVE) for iOS 16.3.1, adding three new CVEs to the January release of iOS 16.3.

The new vulnerabilities listed by Apple as patched in iOS 16.3.1 relate to “maliciously crafted certificates” that could lead to a denial-of-service (DoS) attack, in which an attacker finds a way to stop a target machine from providing service, and is a common attack method used by hackers. Apple says the DoS issue has been fixed with “improved input validation”.

In addition, the security content page for iOS 16.3 has been updated to show that three new vulnerabilities have been fixed. One of the vulnerabilities was found in the system’s Crash Reporter, which could allow an attacker to read arbitrary files as root. The other two Foundation-related vulnerabilities could allow an attacker with elevated privileges to execute arbitrary code on an iPhone or iPad, bypassing the application’s sandbox.

It’s unclear exactly why Apple hasn’t mentioned such security vulnerabilities before. But it is worth noting that these vulnerabilities have been fixed in iOS 16.3.1, which is now available to all users. With macOS 13.2.1 and iOS 16.3.1, Apple has also fixed a security vulnerability related to WebKit (the Safari web browser engine) that was “actively exploited.

The post Apple discloses multiple new security vulnerabilities, fixed in iOS 16.3 appeared first on TechGoing.

In Apple’s official support forums and Reddit community, many users have reported that iCloud has been experiencing sync failures after upgrading to iOS 16.3. Services including iCloud Drive and iCloud Backup receive an “An unexpected error occurred. Please try again later” error alert.

iOS 16.3 introduces a new Apple ID security key feature. Apple says the optional security feature is designed for individuals who want “extra protection against targeted attacks like phishing or social scams.

When enabled, logging into Apple ID requires entering the user’s account password and then using a FIDO-authenticated security key to complete two-factor authentication instead of the traditional six-digit authentication code from another Apple device.

The majority of users who have reported these sync failures have not enabled two-factor authentication. Follow-up reports indicate that enabling two-factor authentication for Apple IDs may be a workaround, but not everyone will want to enable this security feature on their accounts.

The post Some users have reported that after upgrading to iOS 16.3, many Apple iCloud services cannot be synced appeared first on TechGoing.

iOS 16.3 introduces iCloud Advanced Data Protection, Apple ID security keys, and includes other enhancements, bug fixes, and security updates for iPhone.

Apple typically stops validating older versions of iOS a few weeks after it pushes out the official update. For some users who update to the latest iOS, downgrading can sometimes be very effective when they encounter major bugs. That’s why Apple waits a while before closing the verification channel for older versions of iOS.

The previous release of iOS 16.2 introduced the “Infinity Notes” app and also added Apple Music singing, lock screen improvements, and other features and bug fixes for the iPhone.

The post Apple closes iOS 16.2 verification channel, iPhone cannot be downgraded after upgrading iOS 16.3 appeared first on TechGoing.

The official Apple changelog and found that this update fixes vulnerabilities in AppleMobileFileIntegrity, ImageIO, Kernel, Mail, Maps, Safari, and WebKit. For example, a vulnerability in the Weather app allowed other apps to bypass Privacy settings.

Another vulnerability exists in WebKit (the engine of the Safari browser) and fixes a vulnerability that could lead to the execution of arbitrary malware.

Mac users who have upgraded to macOS Ventura 13.2, Apple TV users with tvOS 16.3, and Apple Watch users with watchOS 9.3 may not worry about these security vulnerabilities.

Notably, Apple has also released iOS 15.7.3, macOS Monterey 12.6.3 and macOS Big Sur 11.7.3, providing the same patches for users who have not (or cannot) updated their devices to the latest versions.

The post Apple also fixed a number of security vulnerabilities iOS / iPadOS 16.3 update appeared first on TechGoing.

It should be noted that due to the configuration cache of Apple’s regional node servers, there may be a slight delay in the detection of upgrades in some places, usually within half an hour, not too long.

The post Apple iOS 16.3 officially released appeared first on TechGoing.

Apple acknowledged the issue in an internal memo last week and said it was being fixed, but it’s not clear what the root cause is or how many iPhone 14 Pro /Max devices are affected. The bug fix indicates that this is a software issue and not a hardware defect, so iOS 16.3 will need to be installed when available to resolve the issue for affected customers.

Apple today released a preview version of iOS 16.3 RC to developers, and the official update is expected to be released to the public next week.

iOS 16.3 includes a number of new features, including the option to use physical security keys as two-factor authentication for Apple ID accounts, globally available advanced data protection for broader iCloud encryption, support for the new HomePod second-generation speakers, and a new Unity wallpaper to celebrate Black History Month.

The post Apple iOS 16.3 RC fixes iPhone 14 Pro and Max flickering horizontal lines issue appeared first on TechGoing.

In addition to iOS 16.3, Apple is expected to release iPadOS 16.3, watchOS 9.3, as well as tvOS 16.3 and macOS 13.2.

The Unity 2023 dial will be available next week and requires Apple Watch Series 4 or later running watchOS 9.3, as well as iPhone 8 or later and iPhone SE (2nd generation) or later running iOS 16.3.

A new Unity iPhone wallpaper for the lock screen will also be available next week and requires iPhone 8 or later running iOS 16.3.

Compared to iOS 16.2, iOS 16.3 has fewer new features, focusing primarily on bug fixes, and is expected to support features like Apple ID security keys.

The post Apple confirms: iOS 16.3 will be released next week appeared first on TechGoing.

With the official release of iOS 16.3 next month, Apple may release more new features in subsequent Beta releases, but it’s not likely.

Apple’s advanced security features Security Keys

The first Beta version of iOS 16.3 introduced a new Security Keys feature for Apple IDs, which Apple says will be rolled out globally early this year.

The feature gives users the option to use a hardware security key to further protect their accounts. When enabled by Apple users, Security Keys can require the use of a hardware security key instead of a mobile verification code to enhance Apple’s two-factor authentication.

Apple does not intend to release its own hardware security keys. Apple users can use this feature with third-party security keys such as the YubiKey 5Ci, which is available for iPhone, iPad, and Mac with Lightning and USB-C connectors.

HomePod Handoff Prompt

As Max Weinbach pointed out on Twitter, the first iOS 16.3 beta will have a new prompt for transferring music from iPhone to HomePod. This feature already exists, but Apple has now added a reminder.

Changing the wording of emergency SOS settings

In the second beta release of iOS 16.3, Apple has tweaked the wording of some of the emergency SOS options in the Settings app to make them clearer.

“Call with Hold” is now “Call with Hold and Release”, “Call with 5 Presses ” is now “Call with 5 Button Presses” and “Countdown Sound” is now “Call Quietly”. Apple has also updated the descriptions of these features. By default, “Call Quietly” is disabled.

The post One new feature, two detail adjustments and Apple iOS 16.3 update summary appeared first on TechGoing.

So far, the updates for iOS 16.3 and iPadOS 16.3 appear to be smaller than the iOS 16.2 and iPadOS 16.2 releases. It adds support for physical security keys that add an extra layer of protection to Apple IDs. With this feature, a physical FIDO-authenticated security key can be used instead of device authentication when signing into your Apple ID on iCloud or a new device. The update also simplifies the process of transferring songs between iPhone and HomePod.

The post Apple iOS and iPadOS 16.3 public beta Beta 2 released appeared first on TechGoing.

The update introduces support for physical security keys that can be used as additional protection for Apple IDs. Apple announced this new feature just last week and expects it to be officially available in 2023. security keys for Apple ID will provide users with the option to add third-party security keys to their accounts.

With this feature, you can use a physical FIDO-authenticated security key instead of device authentication when signing into Apple ID on iCloud or a new device. Apple says physical security keys provide strong protection against phishing and unauthorized account access.

Security keys can be set up on devices running the beta by going to Apple ID > Security Keys and then following the instructions. iPhone, iPad, and Mac currently support FIDO authentication security keys.

In addition, Apple has included a new, simplified guide in iOS 16.3 to help and guide users on how to transfer and control music from their iPhone to HomePod. Users can move their iPhone closer to the HomePod to view playback controls or transfer audio between devices.

In addition to iOS 16.3, Apple is also pushing out Beta versions of tvOS 16.3, watchOS 9.3 and macOS 13.2. Bloomberg’s Mark Gurman reports that Apple plans to release the official iOS 16.3 update sometime in February or early March.

So far, no other major changes have been found in the iOS 16.3 beta.

The post Apple has now released the first public beta of iOS / iPadOS 16.3 appeared first on TechGoing.