New Vulnerability Found That Allows to Steal Any App Password from iOS and OS X

According to the latest report from security researchers, Apple’s OS X and iOS have a vulnerability that allows hackers to steal passwords from all the applications installed on a device. The report comes from a reliable source, The Register, that is why I think we can believe it. This software bug affects not only those apps that are installed from the App Store or other sources, but even the native apps like Mail. What is interesting is that the vulnerability was first found in October 2014. This means that the guys from Cupertino either ignore or have difficulties in fixing the problem.

Indiana University's Luyi Xing, Xiaolong Bai, XiaoFeng Wang, and Kai Chen, joined Tongxin Li of Peking University and Xiaojing Liao of Georgia Institute of Technology to publish the paper Unauthorized Cross-App Resource Access on MAC OS X and iOS.

Although Apple is aware of the bug, it hasn’t yet commented on it or released a fix. Still, I believe the company developers are currently doing their best to resolve the issue.

Stay tuned for more news on this topic. I’ll try to keep an eye on this OS X and iOS security vulnerability.

[via iClarified]