Google reveals major iPhone security flaws that let websites hack phones

Illustration by Alex Castro / The Verge

Security researchers working in Google’s Project Zero team say they have discovered a number of hacked websites which used previously undisclosed security flaws to indiscriminately attack any iPhone that visited them. Motherboard reports that the attack could be one of the largest ever conducted against iPhone users. If a user visited one of the malicious websites using a vulnerable device, then their personal files, messages, and real time location data could be compromised. After reporting their findings to Apple, the iPhone manufacturer patched the vulnerabilities earlier this year.

Motherboard notes that the attack could have allowed the sites to install an implant with access to an iPhone’s keychain. This would have given the...

Continue reading…

from The Verge - All Posts https://ift.tt/2ZqvK95