Apple Remote Desktop software was vulnerable to snooping

Apple users employing Apple’s Remote Desktop software to administer other servers have been doing so without their data being encrypted if they asked the software to do so, and were running the latest version.

In a patch released by the Cupertino, California, company today, Apple stated that when connecting to third-party virtual network computing (VNC) servers, data is not being encrypted, even when the user selects “Encrypt all network data”. Additionally, no warning is being provided to the user.