Warning: Safari leak can expose crypto keys on iPhone

Security researchers are raising the alarm over a potentially serious vulnerability in Safari on the iPhone. Through a so-called zero-day exploit, attackers could gain access to sensitive data on the device, including private keys and recovery phrases for crypto wallets. The vulnerability is reportedly affecting a wide range of iOS versions and raises questions about the security of crypto data stored on Apple devices.

In brief:

• A potential Safari vulnerability could expose private keys, recovery phrases and other sensitive data on iPhones.
• It concerns an exploit chain that can gain access to the system through Safari, all the way down to kernel level.
• Users are advised to update iOS immediately and not to open untrustworthy links in Safari.

Exploit can reach kernel level

According to security researchers, it concerns an attack chain that starts with a vulnerability in WebKit, the browser engine behind Safari, and in JavaScriptCore. By corrupting memory, attackers can then bypass the browser’s sandbox and ultimately gain access at kernel level, the deepest level of the operating system.

That makes the vulnerability extra dangerous. Once an attacker has access at that level, virtually all data on the device is potentially reachable, including what is stored in Apple’s Keychain, the secure storage location for passwords and other sensitive information.

Wide range of iOS versions possibly affected

The warning is said to relate to iOS versions 13 through 26.5. Whether the full range is actually vulnerable has not yet been independently confirmed. Coinbureau urges iPhone users to install the latest iOS update as soon as possible.

Anyone who stores crypto wallet data on their iPhone would be wise to avoid opening unknown or untrustworthy links via Safari for the time being. The issue shows that Apple devices, which are generally considered secure, can also be vulnerable to targeted attacks. We previously wrote about how privacy remains an underestimated risk within the crypto world.