Flaw in iOS Mail app
There are reports circulating of a flaw with the official Mail app iOS that is being exploited by hackers to infiltrate people’s iPhones with a specially crafted email. They called it “Zero-Click” attack. What makes this flaw particularly scary is how the specially crafted email can trigger it without any interaction from the user. Instead, the attack will occur in the background as the Mail app loads the email.
Apple has responded to this report and said in a statement: “We have thoroughly investigated the researcher’s report and, based on the information provided, have concluded these issues do not pose an immediate risk to our users … The researcher identified three issues in Mail, but alone they are insufficient to bypass iPhone and iPad security protections, and we have found no evidence they were used against customers.”
While Apple claimed that the flaw is not critical to users, it is always to better to take into account these extra precautionary measures:
- If you have to use Mail, never trust unsolicited emails and always verify the source. If it sounds too good to be true, delete it.
- Avoid using Mail app until Apple releases an update to fix this flaw, and use alternate email application like the Gmail app, Outlook for iOS, or Spark.
A newly discovered iOS text bug
There is also a newly discovered bug in iOS that will cause your iPhone or iPad to crash for merely receiving a text notification.
This bug occurs when an iOS device user receives a string of text using Sindhi characters. Sindhi is the official language of the Sindh province of Pakistan and is spoken in India, as well.
This type of bug is commonly referred to as a text bomb, as a malicious actor can weaponize it in order to prank, bully, or troll their targets.
Receiving any notification with this Sindhi text string, whether it be in the Messages app, WhatsApp, or social media notification, will cause your iPhone to crash.
Until Apple releases an update to fix this flaw, there’s really not much you can do to stop this as of the moment except turning off all notification for messaging and social media apps on you device.
Stay safe and secure!