Imagine getting hacked just by receiving an email,without even having to download any attachment. Does this danger alarm you? So, according to ZecOps, you'd better stop using Mail if you're used to checking your inbox with this software published by Apple. Indeed, it is via this tool that attacks were allegedly carried out in this way.
Among the first victims, we find among others ajournalist, employees of one of the Fortune 500 companies, or even a German personality whose name has not been revealed. But all users of the Cupertino platform would be affected, without exception.
A fix on the way?
Unfortunately, for the moment, no solution seems to have been put in place by Apple. The only alternative recommended by the company behind the discovery is todisable Mail, preferring other applications or a classic provider likeGMailorOutlook.
The vulnerability in questionwould date from iOS 6, and would affect both iPads andiPhone, but not computers running macOS. The entire process used to exploit this breach is accessible in the source of this article. Tim Cook's teams should probably send a patch to our smartphones and tablets shortly to resolve the problem,as in the last similar alert.
Updated Friday April 24, 2020
Apple assures that it is working on a fix which will be deployed shortly and reassures about the dangers of this flaw.
Apple's comment on the ZecOps claim of a Mail .app exploit (full text in image description):
TL;DR: "The researcher identified three issues in Mail, but alone they are insufficient to bypass iPhone and iPad security protections."pic.twitter.com/hfE2xlzHUv
— Rene Ritchie (@reneritchie)April 24, 2020
i-nfo.fr - Official iPhon.fr app
By : Keleops AG
