The researchers at Kaspersky Lab they discovered a vulnerability in its core Darwin, an open-source component in iOS and OS X. Vulnerability «Darwin Nuke» leaves the devices with OS X 10.10 and iOS 8 exposed to remote Denial of Service (DoS) attacks, which can damage devices and affect corporate networks to which they are connected. 
Experts call users to update their devices by installing OS X versions 10.10.3 MriOS8.3, which are already available to the public and no longer include vulnerability Darwin Nuke.
Vulnerability analysis Darwin Nuke Kaspersky Lab has revealed that the devices affected by the threat include those with 64 and 8 processors, including iPhone 5S, iPhone 6, iPhone 6 Plus, iPad Air, Air iPad 2, iPad mini 2 and iPad mini 3.
Exploitation of vulnerabilityDarwin Nuke"Is done when processing a specific IP packet with invalid IP options. Attackers can initiate a DoS (Denial of Service) attack on a device running OS X 10.10 or iOS 8 by sending a wrong network packet to the target. After processing the invalid network packet, the system will crash. According to Kaspersky Lab researchers, the system will "crash" if the IP package meets the following requirements:
- The size of the IP header should be 60 bytes.
- The size of the payload IP should be less than or equal to 65 bytes.
- IP options should be incorrect (invalid choice size, class, etc.)
"At first glance, it is very difficult to exploit it bug Darwin Nuke, as the conditions to be met by attackers are not insignificant. However, persistent digital criminals can do it and ultimately destroy devices or even affect corporate network activity. The router and firewall usually block incorrectly packets with invalid size choices, but we have discovered several combinations of wrong IP options that are able to go through router. We would like to warn all OS X 10.10 and iOS 8 users to update their devices and switch to OS X 10.10.3 and iOS 8.3 ", said Anton Ivanov, Kaspersky Lab's Senior Malware Analyst.
Kaspersky Lab products protect OS X operating systems from "Darwin Nuke" vulnerability with Network Attack Blocker. Also, Kaspersky Internet Security for Mac 15.0 detects this threat under the code name "DoS.OSX.Yosemite.ICMP.Error.exploit".
To enhance the protection of Mac devices, Kaspersky Lab recommends users to:
- They use a web browser with a proven track record in the immediate fix of security issues.
- Update their software and install the necessary patches when updates are available
- Χρησιμοποιούν λύσεις managementof passwords that help counter phishing attacks.
- Install a reliable security solution.
Furthermore tips for the security of iPhone devices are available at address: http://blog.kaspersky.com/iphone-maximum-security-tips/. More information is available at Securelist.com. Finally, at Official Blog of Eugene Kaspersky you can find a recent post regarding threats against Mac computers.
