Security Architecture, Endpoint/Device Security, Endpoint/Device Security, Security Strategy, Plan, Budget, Vulnerability Management, Incident Response, TDR, Endpoint/Device Security, Endpoint/Device Security, Endpoint/Device Security

Apple preps fix for iOS email bug that prevents attachment encryption

Share

Apple is aware of and prepping a fix for an issue that results in email attachments not being properly encrypted in versions of the iOS mobile operating system.

“We're aware of the issue and are working on a fix which we will deliver in a future software update,” Apple said in a statement, according to a Monday post by news site AppleInsider.com.

The issue was written about by security researcher Andreas Kurtz in a blog posted on April 23, in which Kurtz explains that the bug was validated after restoring an iPhone 4 to iOS 7.1.1, the latest version, and accessing the email folder in the file system. Kurtz said he later reproduced the flaw on an iPhone 5s and iPad 2 running iOS 7.0.4.

Until the issue is fixed, Kurtz suggested turning off mail synchronization on devices where the bootrom is exploitable.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.