Apple issues iTunes update to close man-in-the-middle hole

Apple on Monday released an updated version of its iTunes program to close a vulnerability that could lead to a man-in-the-middle attack. Version 10.5.1 contains a fix for a flaw that could permit an attacker to "offer software that appears to originate from Apple" when users are prompted to install an iTunes update but don't have Software Update for Windows installed, according to an advisory. "[C]licking the 'Download iTunes' button may open the URL from the HTTP response in the user's default browser," the advisory said, at which time an attacker theoretically could pass malicious content to the user.

Sign up to our newsletters

More in News

House Intelligence Committee OKs amended version of controversial CISPA

Despite the 18-to-2 vote in favor of the bill proposal, privacy advocates likely will not be satisfied, considering two key amendments reportedly were shot down.

Judge rules hospital can ask ISP for help in ID'ing alleged hackers

The case stems from two incidents where at least one individual is accused of accessing the hospital's network to spread "defamatory" messages to employees.

Three LulzSec members plead guilty in London

Ryan Ackroyd, 26; Jake Davis, 20; and Mustafa al-Bassam, 18, who was not named until now because of his age, all admitted their involvement in the hacktivist gang's attack spree.