Apple Implements Mac App Store Security Update for XARA Exploits, Additional Fixes in Progress

Apple has commented on a major security flaw in iOS and OS X that lets attackers steal passwords from any installed app.

Back in October, security researchers found a way to crack Apple's keychain making it possible to steal passwords from any installed app including the native the Mail app without being detected. .

Following the public disclosure of the vulnerability, Apple told iMore it has implemented a security update and is working on some additional fixes.


Earlier this week we implemented a server-side app security update that secures app data and blocks apps with sandbox configuration issues from the Mac App Store," an Apple spokesperson told iMore. "We have additional fixes in progress and are working with the researchers to investigate the claims in their paper."

We'll keep you up to date as Apple continues to work on resolving the issue. You can follow iClarified on Twitter, Facebook, or RSS for the latest.