Apple cures Flashback malware with third OS X Java update

11160(1)10updated 05:10 pm EDT, Thu April 12, 2012 Java for OS X 2012-003 update pulls Flashback

Apple fulfilled promises of a cure for a rare Mac exploit on Thursday evening by posting another key Java update. Java for OS X 2012-003 for Lion owners, and Java for Mac OS X 10.6 Update 8, both actively remove the "most common variants" of Flashback. Loading the update automatically scans for Flashback and, if it's found, lets the user know that it was pulled.On Lion only, the update will disable the Java browser and Java Web Start if they haven't been used in 35 days. Users can always reenable them, but the code now won't run by default, preventing users from auto-infecting themselves with any Java-related exploits.

Flashback was the first real large-scale Mac malware instance. Although specific to Java and not the Mac, 98 percent of the infections were Macs, owing in part to a slower patch response. Apple has been making up for lost time by first patching against the exploit and the new removal tool, but it contrasts with Microsoft's semi-rigid "patch Tuesday" practice, where it often fixes any security bugs on a regular monthly interval and often has fixes for surprise attacks within a few days. For Microsoft, however, the faster update cycle came only after a series of major malware outbreaks and having to heavily rework Windows security.

Flashback itself was rendered inert fairly quickly by directing any successful exploits to safe servers.

By Electronista Staff

printemail(10)

TAGS :  

industry, security, software, Microsoft, Java, Apple, Flashback

Share the Article

FacebookTwitterDeliousSlash DotDiggRelated ArticlesFlashback.G Trojan uses three-pronged attack on MacsApple updates Java distribution for Lion, Snow LeopardFlashback.K Trojan exploits unfixed Java vulnerabilityBriefly: Norton's Flashback tool, FileMaker Go 12 hits 100KApple working on Flashback removal toolIntego: new Flashback variant masquerades as Software UpdateApple posts revised Java, new Digital Camera RAW updatesRecent ArticlesValve veteran details wearable computing projectReport: Apple considered investing in Sharp for LCD techNokia posts Lumia 900 data fix bug three days earlyCanon warns of EOS 5D Mark III bug skewing exposureRumors: BBM seen on iOS/Android, BlackBerry PlayBook 4G soonAT&T, Reebok, Intel to release branded Spotify appsApple denies product with Starck, yacht more likely insteadPanasonic Eluga ships in GermanyLenovo to ship ThinkPad L430, L530 notebooks in JuneNext Xbox rumored to have 16-core processorSamsung says Windows Phone 8 devices due late 2012

Other Articles

toggle

Previous Comments

Comment buried. ShowArne_Saknussemm

Fresh-Faced Recruit

Joined: Apr 2011

-904/12, 06:19pm

View the Original article