Apple released a security update for Apple devices on February 13, 2023, regarding CVE-2023-23529. This vulnerability allows an attacker to remotely execute code without your knowledge. The latest security updates include the fix to this issue, and we encourage all users to update all Apple devices as soon as possible.

The update will, at a minimum, require a restart of Safari, and a complete restart of the affected device. Please save all your work before beginning the update process. 

As a reminder, Berkeley Lab IT recommends that all users install BigFix and anti-virus software on all systems. BigFix can detect and remediate security issues such as the one discussed in this article. Berkeley Lab recently selected CrowdStrike, a next-generation antivirus product, to replace Sophos. BigFix and CrowdStrike are available for use on all Lab-issued Mac and Windows systems from software.lbl.gov.

Additional Information

• BigFix Information
• CrowdStirke Information
• About the security content of macOS Ventura 13.2.1
• About the security content of Safari 16.3
• Apple Security Updates
• Patch Now: Apple’s iOS, iPadOS, macOS, and Safari Under Attack with New Zero-Day Flaw