Latest in Gear

Image credit: Roman Stavila via Getty Images

Apple tries to clear up Google's claims about iOS vulnerabilities

It issued a rebuttal to a recent Google blog post about an iOS exploit.
135 Shares
Share
Tweet
Share
Save

Sponsored Links

Roman Stavila via Getty Images

Apple has taken issue with Google's findings about exploit-laden websites injecting malicious code into iPhones. Last week, Google published a blog post describing how a handful of hacked websites had taken advantage of an iOS vulnerability. Today, Apple shared a rebuttal.

Apple reiterates that the vulnerabilities Google highlighted were fixed in February. It says the attack affected fewer than a dozen websites that were targeted at the Uighur community. Apple believes the website attacks were only operational for about two months, not two years, as the Google security researchers wrote. Apple reportedly fixed the issue within 10 days of learning about it.

Google responded with the following statement:

"Project Zero posts technical research that is designed to advance the understanding of security vulnerabilities, which leads to better defensive strategies. We stand by our in-depth research which was written to focus on the technical aspects of these vulnerabilities. We will continue to work with Apple and other leading companies to help keep people safe online."

Still, Apple says, security is one of its top priorities. "Regardless of the scale of the attack, we take the safety and security of all users extremely seriously." Google researchers pointed to other iOS security flaws earlier this summer, and Apple recently had to re-fix a bug that let users jailbreak phones. If nothing else, this is a reminder that cybersecurity is an ongoing battle.

Update 9/6/2019 3:25PM ET: This story has been updated to include a statement from Google.

All products recommended by Engadget are selected by our editorial team, independent of our parent company. Some of our stories include affiliate links. If you buy something through one of these links, we may earn an affiliate commission.
Comment
Comments
Share
135 Shares
Share
Tweet
Share
Save

Popular on Engadget

Engadget’s guide to Home Entertainment

Engadget’s guide to Home Entertainment

View
Logitech unveils its first mouse and keyboard built for Chrome OS

Logitech unveils its first mouse and keyboard built for Chrome OS

View
'Control' will let you photograph its beautiful Brutalist setting

'Control' will let you photograph its beautiful Brutalist setting

View
Google's Daydream VR experiment is over

Google's Daydream VR experiment is over

View
Here's everything Google announced at the Pixel 4 event

Here's everything Google announced at the Pixel 4 event

View

From around the web

Page 1Page 1ear iconeye iconFill 23text filevr