Home iOS It’s been a big week for patches

It’s been a big week for patches

30
0

This week brought updates that I consider critical for the “Big Three” — my operating system (Windows), my browser (Google Chrome) and my phone (from Apple). All three releases patch major zero-day vulnerabilities on all three platforms.

While I strongly recommend that you patch Chrome and your iPhone as soon as possible, I always recommend that you hold back on updating Windows. That remains true — at least until we see whether there are any trending side effects from the Patch Tuesday updates.

Let’s break down the patching to do right away.

First, prioritize patching Apple devices. Among this week’s patches is one for Pegasus spyware, which can open up access to the camera and microphone as well as text messages, phone calls, and emails.  iPhones, in particular, have been targeted. Apple typically pushes these updates overnight if your phone is plugged in and charging (and connected to the Internet). If you want to make sure your iPhone has received the update, click on Settings, then General, then tap Software Update. Typically, after my iPhone updates, some apps may need passwords again. I personally try to save critical ones in the iCloud keychain. Look for patches for iOS 14.8 and iPad OS 14.8, and Security Update 2021-005 for macOS Catalina and Big Sur 11.6.

The Chrome browser update fixes two in-the-wild exploits patched in version 93.0.4577.82 for Windows, Mac and Linux. (For those using the Chrome OS, Bleeping computer reports that some devices have been reporting black screens after trying to log into their Chrome OS accounts.)

And finally, we come to Microsoft. For anyone hoping this month’s updates would “fix” an issue involving the use of group policy to deal with printers for your domain/business users (I wrote about this earlier), welcome to your new normal: The way you used to deploy printers isn’t fixed. What is fixed is yet another remote attack that utilized the print spooler to gain more access to your machines. So we’re going to have to redeploy print drivers using different means.

Copyright © 2021 IDG Communications, Inc.