Security News > 2020 > April > Apple Awards Researcher $75,000 for Camera Hacking Vulnerabilities

Apple Awards Researcher $75,000 for Camera Hacking Vulnerabilities
2020-04-03 13:59

A white hat hacker says he has earned $75,000 from Apple for reporting several Safari vulnerabilities that can be exploited to hijack the camera and microphone of devices running iOS or macOS. Researcher Ryan Pickren identified a total of seven vulnerabilities in Apple's Safari web browser, three of which can be exploited to spy on users through the camera and microphone of their iPhone, iPad or Mac computer.

Apple patched the vulnerabilities that allow hackers to spy on users in January, while the other flaws were fixed in March.

"Put simply - the bug tricked Apple into thinking a malicious website was actually a trusted one. It did this by exploiting a series of flaws in how Safari was parsing URIs, managing web origins, and initializing secure contexts," the researcher explained in a blog post summarizing his findings.

This is not the first time Apple has patched vulnerabilities that can be exploited to spy on users.

Last year, the company fixed a vulnerability in FaceTime that could have given hackers access to a device's camera and microphone.


News URL

http://feedproxy.google.com/~r/Securityweek/~3/4AMueuWVO8k/apple-awards-researcher-75000-camera-hacking-vulnerabilities

Related vendor

VENDOR LAST 12M #/PRODUCTS LOW MEDIUM HIGH CRITICAL TOTAL VULNS
Apple 138 584 4214 1629 2414 8841