The security breach apparently affects iPhone Mail and Safari running on firmware 1.1.4 and 2.0. However, earlier versions may also be vulnerable.
To avoid being spoofed, Raff recommends that users manually input URLs into iPhone's Safari browser and avoid clicking on Mail links until Apple releases a fix.
Apple has acknowledged the gaping hole in its iPhone Mail application and launched an investigation into Safari's alleged vulnerability to forged URLs. ยต
iPhone vulnerable to hack attacks
Insecurity researcher Aviv Raff has warned that iPhone's Mail and Safari applications are prone to a URL spoofing vulnerability that could direct unsuspecting surfers to malicious phishing sites.
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
.jpg&h=140&w=231&c=1&s=0)
Partner Content
Who owns your brand’s AI reputation?
.png&h=140&w=231&c=1&s=0)
Promoted Content
From ambition to impact: The next era of government transformation.
Promoted Content
How David Jones, Canva and others are putting agentic AI to work
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Protecting the Human Operating System: How Technology Teams Can Perform Under Pressure in an Always-On World
SPONSORED RESOURCES
Rethinking Ransomware Recovery: Closing the Detection and Recovery Gap in Asia Pacific
Strategies to Counter the Ransomware Threat in APJ
Craft your ideal hybrid multicloud strategy
Secure your AI future with generative AI defense
See how F5 protects modern applications against evolving threats
Cloud Resilience Summit
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC
