Apple Implements Mac App Store Security Update for XARA Exploits

Apple has commented on a major security flaw in iOS and OS X that lets attackers steal passwords from any installed app.

Back in October, security researchers found a way to crack Apple’s keychain making it possible to steal passwords from any installed app including the native the Mail app without being detected. .

Following the public disclosure of the vulnerability, Apple told iMore it has implemented a security update and is working on some additional fixes.

Earlier this week we implemented a server-side app security update that secures app data and blocks apps with sandbox configuration issues from the Mac App Store,” an Apple spokesperson told iMore. “We have additional fixes in progress and are working with the researchers to investigate the claims in their paper.”