An iOS data breach could result in your iCloud data being stolen without you even noticing.
iCloud vulnerable due to data breach
Jamf Threat Labs has discovered a major data breach in Apple’s TCC (Transparency, Consent and Control) system. The vulnerability is known as CVE-2024-44131 and could give apps access to your private data, such as photos and location data, without your knowledge.
The discovery of the data breach by Jamf Threat Labs should definitely be seen as a wake-up call. The TCC system should alert you when apps want to access your private data. However, the vulnerability takes advantage of weaknesses in the FileProvider from Apple, allowing apps to slip past the controls. As a result, they gain access to your private data without asking permission. And so you don’t notice it at all.
macOS and iOS systems
The data breach gives unauthorized access to files and folders, health data, the microphone, the camera and more. The leak was found on both macOS and iOS systems. This shows that mobile devices are no longer more secure than PCs. Attackers are now targeting different platforms to gain access to services like iCoud.
This way you stay safe
Fortunately, Apple has already fixed the iCloud data breach in iOS 18 and macOS 15, after Jamf alerted the company. That is of course good news, but the leak shows that nowadays no platform is safe anymore and can therefore be hacked. Mobile malware attacks will reach a whopping number between 2022 and 2023 52 percent increased.
To stay safe, first make sure all your devices have the latest iOS and macOS versions. You then have the latest security patches and that is the most important thing. Furthermore, keep a close eye on who has access to your iPhone and if you see any strange activity.