Apple has only just released their new iOS 12.1 software update and now an exploit in the OS has been discovered that lets the lock screen be bypassed.
The exploit was discovered by security researchers and it can be seen in the video below, once activated it will give someone access to your contact information on your device.
As we can see from the video once the exploit has been used it then allows access to your contacts on your device.
Details of the Exploit
The exploit involves a series of steps that can be executed on a locked iPhone running iOS 12.1. By using a combination of Siri and the new Group FaceTime feature, an unauthorized user can bypass the lock screen and gain access to the contact list. This is particularly concerning as it exposes personal information without needing the device’s passcode or biometric authentication.
The process begins by initiating a FaceTime call and then accessing Siri to enable VoiceOver. From there, the attacker can manipulate the interface to reveal contact information. This method highlights a significant vulnerability in the way iOS handles certain features and permissions.
Implications and Apple’s Response
As yet there is no official statement from Apple on this exploit and no details on when it will be fixed. However, given the severity of the issue, it is likely that Apple will prioritize a patch to address this security flaw. Historically, Apple has been quick to respond to such vulnerabilities, often releasing minor updates to rectify security issues.
This exploit underscores the importance of regular software updates and the need for robust security measures. Users are advised to be cautious and to monitor for any updates from Apple that address this issue. In the meantime, disabling Siri on the lock screen can serve as a temporary measure to mitigate the risk.
The discovery of this exploit also raises questions about the testing and quality assurance processes for iOS updates. While new features and improvements are always welcome, they should not come at the expense of security. This incident serves as a reminder of the delicate balance between innovation and safety in software development.
As soon as we get some details on when this exploit will be fixed in Apple’s iOS 12.1 software, we will let you guys know. It is crucial for users to stay informed and apply updates as soon as they are available to protect their devices and personal information.
Latest Geeky Gadgets Deals
Disclosure: Some of our articles include affiliate links. If you buy something through one of these links, Geeky Gadgets may earn an affiliate commission. Learn about our Disclosure Policy.