This document describes the security content of Xcode 9.4.1.

Original release date: May 29, 2018
Systems Affected

Network systems

Overview

This joint Technical Alert (TA) is the result of analytic efforts between the Department of Homeland Security (DHS) and the Federal Bureau of Investigation (FBI). Working with U.S. government partners, DHS and FBI identified Internet Protocol (IP) addresses and other indicators of compromise (IOCs) associated with two families of malware used by the North Korean government:

• a remote access tool (RAT), commonly known as Joanap; and
• a Server Message Block (SMB) worm, commonly known as Brambul.

The U.S. Government refers to malicious cyber activity by the North Korean government as HIDDEN COBRA. For more information on HIDDEN COBRA activity, visit https://www.us-cert.gov/hiddencobra.

FBI has high confidence that HIDDEN COBRA actors are using the IP addresses—listed in this...

Original release date: May 25, 2018
Systems Affected

• Small office/home office (SOHO) routers
• Networked devices
• Network-attached storage (NAS) devices

Overview

Cybersecurity researchers have identified that foreign cyber actors have compromised hundreds of thousands of home and office routers and other networked devices worldwide [1] [2]. The actors used VPNFilter malware to target small office/home office (SOHO) routers. VPNFilter malware uses modular functionality to collect intelligence, exploit local area network (LAN) devices, and block actor-configurable network traffic. Specific characteristics of VPNFilter have only been observed in the BlackEnergy malware, specifically BlackEnergy versions 2 and 3....

Original release date: May 21, 2018
Systems Affected

CPU hardware implementations

Overview

On May 21, 2018, new variants—known as Spectre 3A and 4—of the side-channel central processing unit (CPU) hardware vulnerability were publically disclosed. These variants can allow an attacker to obtain access to sensitive information on affected systems.

Description

CPU hardware implementations—known as Spectre and Meltdown—are vulnerable to side-channel attacks. Meltdown is a bug that "melts" the security boundaries normally enforced by the hardware, affecting desktops, laptops, and cloud computers. Spectre is a flaw that an attacker can exploit to force a CPU to reveal its data.

Spectre Variant 3a is a vulnerability that may allow an attacker with local access to...

This document describes the security content of Security Update 2018-001 Swift 4.1.1 for Ubuntu 14.04.

This document describes the security content of tvOS 11.3.

This document describes the security content of iOS 11.2.

This document describes the security content of Safari 11.0.2.

Numbers for iOS formats data based on what you enter. Learn how to change the format and enter data with the keyboard.

Learn how to use the object list to select objects, move up and down in the layering order, group, or delete them.