Apple Contacts App Vulnerable To Hacking, Putting iPhone Users At Risk

Share
Apple Contacts App Vulnerable To Hacking, Putting iPhone Users At Risk

But now it's extending the bug bounty program to all of its platforms and researchers who discover any security flaws other than in the iOS will be eligible to receive payouts as high as $200,000 which is the same reward initially offered as a maximum payout for its iOS program back in 2016.

SQLite is the most widely used database engine in the world. More specifically, it targets its reliance on the SQLite database format that's used pretty much everywhere from Windows 10 and macOS to Safari, Firefox and Android.

Documented in a 4,000-word report, the company's hack involved replacing one part of Apple's Contacts app and while apps and any executable code has to go through Apple's startup checks, an SQLite database is not executable. The Check Point researchers said that keeping the replacement code after the restart on an iOS device was "hard to achieve".

"Wait, what? How come a four-year-old bug has never been fixed?" write Check Point's researchers in their report.

Apple will also be taking other steps to make research easier, including "offering a modified phone that has some security measures disabled".

This story has been published from a wire agency feed without modifications to the text. Check Point's hack works on devices running iOS 8 through the beta versions of iOS 13. But the SQLite is so versatile that it could be triggered in "many scenarios".

The so-called "bug bounty" is the highest one offered by any major tech company - far surpassing the £124k offered by Google for finding security holes in Google code. But the recent revelations of serious bugs in iMessage and FaceTime emphasize that even Apple devices are vulnerable to hacking.

Apple's head of security, Ivan Krstić, recently announced the news at the Black Hat technology security conference in Las Vegas.

Cybersecurity firms such as the NSO Group demand over a million dollars from government agencies and private clients for remotely breaking into an iPhone.

JUST DAYS AFTER APPLE announced that it would be providing hacker-friendly iPhones and generous bug bounties to security partners, a vulnerability has been revealed in eight years' worth of iOS devices.

Share

Advertisement

Related Posts

Trump targets legal migrants who get food aid
Foreign nationals will be barred from entering the United States if they are found likely to become public charges. The rule change would reinforce "ideals of self-sufficiency," officials said.

The Crown Season 3 (Finally!) Gets November Premiere Date at Netflix
I think Claire Foy is an absolute genius, she's an incredibly hard act to follow. Netflix also released the first footage of Colman in character as the Queen .

Fortnite Champ Bugha Swatted During Twitch Stream
More than 38,000 people were watching Giersdorf's game when he was interrupted by the police. It is not known what the swatter told police when they made their false report.

Canadian Police reveal how teen murder suspects died
A completed autopsy on the two bodies confirm their identity, and the results have found that the teens committed suicide by gun. The separate discoveries of the three bodies the teens were believed to have killed shook rural northern British Columbia.

Russia, after protests, tells Google not to advertise "illegal" events
More than 200 people were detained, according to OVD-Info, a group that monitors police. The rallies were 'too big for authorities to ignore, reported The Moscow Times .

Virgil Van Dijk: Liverpool defender questions Chelsea's Premier League title credentials
He is 32, a calm guy, emotional as well, good with his feet - how we saw - and that's really important for us. It takes a while, it takes a couple weeks for sure, and we have to see.

Shweta Tiwari Accuses Husband Abhinav Kohli Of Domestic Violence; Files Complaint?
According to her complaint, Abhinav allegedly would often beat her and was usually under the influence of alcohol. Shweta tied the knot with Abhinav in July, 2013 and have a two-year-old son together, named Reyansh Kohli.

Perseid meteor shower to peak this week
And if that doesn't work and you fail to spot any meteors, you can track the events through NASA Meteor Watch Facebook page . Space .com will be offering a livestream of the meteor shower on its website starting at 4:40am AEST on Tuesday from Slooh.

Donald Trump and former aide Anthony Scaramucci engage in Twitter war
After the interview, Scaramucci tweeted that people are right when they ask him what took so long to turn away from Trump. He added: "Eventually he turns on everyone and soon it will be you and then the entire country".

Walmart to remove displays for violent video games after shootings
Walmart a year ago announced it would cease selling guns and ammunition to anyone under age 21. Employees were also ordered to turn off hunting season videos in the sporting goods department.

© 2015 ExpressNewsline. All Rights reserved.