Apple has introduced three advanced security features focused on safeguarding against threats to user data in the cloud. 

iMessage Contact Key Verification, Security Keys for Apple ID, and Advanced Data Protection for iCloud all focus on increasing security for Apple users amid rising threats. 

“We constantly identify and mitigate emerging threats to their personal data on device and in the cloud,” said Craig Federighi, Apple’s senior vice president of Software Engineering.

iMessage Contact Key Verification

This feature will provide users with automatic alters if an exceptionally advanced adversary, such as a state-sponsored attacker, were to breach cloud services and insert their own device to eavesdrop on these encrypted communications. 

The iMessage feature also allows users to compare a contact verification code in person, on FaceTime or through another secure call. 

Apple admits that this feature would be most useful to users in more extraordinary situations that would threaten their digital security, such as journalists, human rights activites, and members of government. 

Security Keys

While Apple has offered two-factor authentication since 2015, it will now enable users to make use of third-party hardware security keys to enhance this protection. 

For users who opt in, this would require a hardware security key as one of the two factors in the authentication process. 

Again, this is a more specialist security feature designed for users who, often due to their public profile, face concerted threats to their online accounts, such as celebrities, journalists, and members of government. 

The extra feature should make it more difficult for adversaries to access personal information in a phishing scam. 

Advanced Data Protection for iCloud

Apple’s Advanced Data Protection builds on their other Cloud data security, which already protects 14 sensitive data categories using end-to-end encryption by default including passwords and health data. 

For users who opt in to the advanced features, the total number of data categories protected in event of a data breach rises to 23, including iCloud Backup, Notes, and Photos. 

Recommended

• Movers and Shakers | November 2022
• To Fight Climate Change, Governments Must Begin at Home
• Digital Disparity: Glasgow Sees Widest Broadband Gap in UK

Apple still won’t be able to cover mail, contacts, and calendar due to their interoperability with the global email, contacts, and calendar systems. 

Enhanced security for users’ data in the cloud is more urgently needed than ever before – the total number of data breaches more than tripled between 2013 and 2021. 1.1 billion personal records were exposed across the globe in 2021 alone. 

Though Apple is clearly showing their concern for cybersecurity with these security features, not everyone is convinced by these new measures.

Ian Porteous, Regional Director, Security Engineering, UK&I at Check Point Software said: “This added layer of security is not without drawbacks as the end user is now responsible for storing, backing up and securing their own encryption keys. 

“From our experience in mobile security, even though Apple is taking steps to improve privacy, malicious apps, text/iMessage phishing and zero day threats will be unaffected by these measures.”

Get all the latest news from DIGIT direct to your inbox

Our newsletter covers the latest technology and IT news from Scotland and beyond, as well as in-depth features and exclusive interviews with leading figures and rising stars.

To subscribe, click here.