Archive for the 'exploit' Category

New iPhone Vulnerability Gives Attacker Complete Control

It’s only been weeks since its release, and a security flaw has already been found in the iPhone. Security researchers from Security Evaluators were able to execute an exploit on the iPhone that gave them complete control of the device. Not only were they able to access the filesystem, including contacts, text messages, and more, but they also had control of the iPhone’s hardware and could make the phone vibrate, for example. The exploit can be delivered through a malicious web page, or a compromised wireless access point, meaning hundreds of thousands of iPhones are at risk.

The security researchers are not releasing any details of the exploit until August 2, to give Apple time to produce a fix. However, it is very unlikely that every iPhone user will apply the patch by then. Read more »