Recently patched vulnerabilities provided hackers complete access to iPhones

iPhone on table
A new report from a mobile security firm has highlighted a series of vulnerabilities in previous versions of iOS that, when used in the right context, could give an attacker complete control of a user’s device. The findings were published by Zimperium, and relate to two components in particular: the IOSurface and AppleAVE kernel extensions.

These components are responsible for driving a device’s display and allowing hardware acceleration for videos, respectively — though Zimperium has outlined eight ways in which they can be used to compromise an iPhone or iPad. The vulnerabilities concern the elevation of privileges, so unscrupulous parties can be granted free rein over the system. Once they’re in, a hacker can access a variety of personally identifiable information, like the device’s GPS location data, contacts, microphone, and even photos.

The IOSurface extension in particular has been previously linked to jailbreak methods, and with the release of iOS 10.3.2, Apple has patched the issues. However, users of older devices are still left unprotected. According to Zimperium’s Adam Donenfeld, who discovered the vulnerabilities, the exploits are so discreet that they can be performed without the user’s knowledge.

“Before the patch, the only way for a user to guard itself was to install a third-party mobile protection solution,” Donenfeld told Digital Trends. “Unless patched, without a third-party mobile protection solution there’s no way for a user to know whether he’s being attacked.”

Thankfully, Donenfeld noted that Apple has acted swiftly in issuing fixes. Zimperium notified the company of its findings toward the end of March, and Apple pushed out iOS 10.3.2 to devices in mid-May. The oldest iPhone currently supported with updates is the iPhone 5, meaning the wide majority of current iOS users have been covered. Zimperium will publish an expanded proof-of-concept explaining the vulnerabilities in greater detail soon, but the report is currently being delayed at Apple’s request.

Mobile devices carry unique risks. That’s the reason why firms like Zimperium exist — to address the concerns of smartphone and tablet users, who face a very different threat from their desktop counterparts. One of the dangers Donenfeld identifies is the behavior of many mobile devices in automatically connecting to available public Wi-Fi networks.

“Network-based threats are significant and far too easy to execute,” Donenfeld said. “Plus, malware in many forms has grown at an alarming rate in recent years. We’ve seen an increasing number of mobile vulnerabilities — such as Stagefright — being discovered.”

Despite manufacturers’ and researchers’ best efforts, Donenfeld doesn’t expect the rising tide of crime to turn anytime soon.

“Mobility provides a huge number of assets with much less risk of discovery and prosecution than traditional crimes, so it is only logical that mobile threats will continue to grow.”

Product Review

If price is top of mind, Samsung’s Galaxy S10e is the flagship phone to buy

Samsung’s Galaxy S10 and S10 Plus are joined with a new entry into the Galaxy S family -- the Galaxy S10e. It costs a little more than the original price of the Galaxy S9, but it’s meant to be the more affordable phone compared to the…
Computing

Don't use streaming apps? Try the best free media players for your local music

Rather than using music-streaming apps, you may want something for playing your local music. Good news! There are some good alternatives. These are the best media players you can download for free on Windows.
Gaming

Xbox's app lets you access your console while away from home. Here's how

Microsoft's Xbox allows you to access your profile information and launch media content directly from your mobile device. Check out our quick guide on how to connect your smartphone to an Xbox One.
Gaming

Take to the virtual skies with these free flight simulators

You don't have to spend the entirety of your paycheck to become a virtual ace, at least when it comes to flight simulation. Our list of the best free flight simulators will let you unleash your inner Maverick.
Mobile

Worried about extra data charges? Here's how to check your usage on an iPhone

It's common to get a little nervous about nearing data limits. Keep your peace of mind by checking how much data your iPhone is using. Our guide on how to check data usage on an iPhone helps you stay in control.
Mobile

What we like and what we don’t like about the Samsung Galaxy S10

Samsung’s Galaxy S10 takes the elegant design to new heights, boasts incredible screen and camera tech, and offers speedier connectivity, but we don’t like the price and a few other things. Here’s what we like and don’t like about…
Home Theater

Samsung Galaxy Buds first look: Are they ear candy or ear worm?

Samsung’s answer to the oddball design of Apple's AirPods is the new Galaxy Buds, which are cheaper, better looking, and bring some neat features. Can Galaxy Buds snuff out the AirPods?
Mobile

Samsung goes big with the next-gen Galaxy S10 5G smartphone

Samsung has announced a whopping four new Galaxy S10 devices, from the low-cost S10e to the triple-camera S10 and S10 Plus. But it's the Galaxy S10 5G that steals the show as it's among the first 5G-ready smartphones to hit the market.
Product Review

Samsung's Galaxy S10 phones are its most refined yet. Be prepared to pay up

Samsung has unveiled its lineup for its most popular smartphones, and it includes the Galaxy S10 and S10 Plus. The two flagship phones boast hole-punch cameras, fingerprint sensors embedded in the display, and beefier batteries.
Mobile

Folding smartphones hinge on the success of the Samsung Galaxy Fold

The Samsung Galaxy Fold has arrived, and it goes on sale soon. Folding out from a 4.6-inch display to a tablet-sized 7.3-inch display, this unique device has six cameras, two batteries, and special software to help you use multiple apps.
Mobile

Samsung Galaxy S10 vs. S10 Plus vs. S10e vs. S10 5G: Which should you buy?

With four stunning Galaxy S10 phones to choose from, Samsung is bombarding us with choice, but which one should you buy? We compare the S10, S10 Plus, S10e, and S10 5G in various categories to find out exactly how they differ.
Wearables

Samsung's new Galaxy Watch Active can track your blood pressure

Looking for a new fitness buddy? Samsung just launched the Galaxy Watch Active and the Galaxy Fit, two new wearables with a raft of fitness-focused features that'll keep you moving and get you down the gym.
Mobile

Here’s where you can buy the brand-new Samsung Galaxy S10

The Samsung Galaxy S10 is one of the most-anticipated phones of the year, offering a new chipset, beautiful display, and more. Now that the phone has been announced, however, you might be wondering where you can get it for yourself.
Mobile

Adobe Premiere Rush CC is coming to the Samsung Galaxy S10 this year

The Samsung Galaxy S10 boasts a number of hardware improvements over previous Samsung phones, but it also offers a few software improvements too. Adobe Premiere Rush CC, for example, is coming to the Samsung Galaxy S10 later this year.