New security issues for iOS 7, a new vulnerability in TouchID Fingerprint Scanner and iCloud has been found by a German security firm SRL. The flaw allows an attacker with a physical access to the locked handset to access to iPhone and potentially gain control over owner’s Apple ID when combined with Touch ID’s vulnerability to fingerprint spoofing.
The SRL team warned also on another concerning circumstance, is the iPhone owner keeps a password reset email account active on a mobile device it is exposed to the risk that the attacker could obtain full control over his AppleId.
Really bad time in terms of security for the new Apple iOS 7.
(Security Affairs – Apple, iOS 7)