Security Architecture, Endpoint/Device Security, Endpoint/Device Security, Security Strategy, Plan, Budget, Vulnerability Management, Incident Response, TDR, Endpoint/Device Security, Endpoint/Device Security, Endpoint/Device Security

Apple preps fix for iOS email bug that prevents attachment encryption

Apple is aware of and prepping a fix for an issue that results in email attachments not being properly encrypted in versions of the iOS mobile operating system.

“We're aware of the issue and are working on a fix which we will deliver in a future software update,” Apple said in a statement, according to a Monday post by news site AppleInsider.com.

The issue was written about by security researcher Andreas Kurtz in a blog posted on April 23, in which Kurtz explains that the bug was validated after restoring an iPhone 4 to iOS 7.1.1, the latest version, and accessing the email folder in the file system. Kurtz said he later reproduced the flaw on an iPhone 5s and iPad 2 running iOS 7.0.4.

Until the issue is fixed, Kurtz suggested turning off mail synchronization on devices where the bootrom is exploitable.

Get daily email updates

SC Media's daily must-read of the most current and pressing daily news

By clicking the Subscribe button below, you agree to SC Media Terms of Use and Privacy Policy.

You can skip this ad in 5 seconds