3 million iOS and macOS apps were exposed to potent supply-chain attacks

Q: How long will it take to read this news story?

The story "3 million iOS and macOS apps were exposed to potent supply-chain attacks" has 171 words across 31 sentences, which will take approximately 1 - 2 minutes for the average person to read.

Q: Which news outlet covered this story?

The story "3 million iOS and macOS apps were exposed to potent supply-chain attacks" was covered 2 days ago by Ars Technica, a news publisher based in United States.

Q: How trustworthy is 'Ars Technica' news outlet?

Ars Technica is a fully independent (privately-owned) news outlet established in 1998 that covers mostly technology news. The outlet is headquartered in United States and publishes an average of 4 news stories per day. It's most recent story was published 21 hours ago.

Q: What do people currently think of this news story?

The sentiment for this story is currently Negative, indicating that people regard this as "bad news".

Q: How do I report this news for inaccuracy?

You can report an inaccurate news publication to us via our contact page. Please also include the news #ID number and the URL to this story.<ul><li>News ID: #21451218</li><li>URL: https://beamstart.com/news/3-million-ios-and-macos-17198807951195</li></ul>

Ars Technica 2d ago

3 million iOS and macOS apps were exposed to potent supply-chain attacks - Ars Technica

Quick Summary:

Apps that used code libraries hosted on CocoaPods were vulnerable for about 10 years.

When developers make changes to one of their “pods”—CocoaPods lingo for individual code packages—dependent apps typically incorporate them automatically through app updates, typically with no interaction required by end users.“Many applications can access a user’s most sensitive information: credit card details, medical records, private materials, and more,” wrote researchers from EVA Information Security, the firm that discovered the vulnerability.“Injecting code into these applications could enable attackers to access this information for almost any malicious purpose imaginable—ransomware, fraud, blackmail, corporate espionage… In the process, it could expose companies to major legal liabilities and reputational risk.

Vulnerabilities that went undetected for a decade left thousands of macOS and iOS apps susceptible to supply-chain attacks.