Apple Security, WikiLeaks 'Vault 7' Docs: Company Claims Exposed iPhone, Mac Vulnerabilities Have Been Fixed
Apple insisted that the iPhone and Mac vulnerabilities mentioned in the recently released "Dark Matter" article – part of WikiLeaks' "Vault 7" documents – have already been fixed.
WikiLeaks released another installment of Vault 7 on Thursday called "Dark Matter" that comprises of "documentation for several CIA projects that infect Apple Mac firmware (meaning the infection persists even if the operating system is re-installed) developed by the CIA's Embedded Development Branch (EDB)."
Since March 7, WikiLeaks has been releasing documents under the name Vault 7 which consist of papers that allegedly detail CIA's ability and methods of surveillance. The papers include incidents from 2013 to 2016 activities of the said agency.
Get Our Latest News for FREE
As per Wikileaks' claims, CIA has the ability to compromise smart TVs, smartphones (iOS and Android), and commonly used web browsers such as Google Chrome, Firefox and Microsoft Edge, as well as computer operating systems.
However, Apple responded to Wikileaks' claims, saying (via TechCrunch): "We have preliminarily assessed the Wikileaks disclosures from this morning. Based on our initial analysis, the alleged iPhone vulnerability affected iPhone 3G only and was fixed in 2009 when iPhone 3GS was released."
The Cupertino, California company added, "Additionally, our preliminary assessment shows the alleged Mac vulnerabilities were previously fixed in all Macs launched after 2013."
Apple also clarified that they were not in touch with WikiLeaks to gather bits of information but they did give instructions to the organization that if there was any concern related to their products' security aspect, they must go "through our normal process under standard terms."
The Dark Matter installment of Vault 7 focused on Apple iOS and Mac exploits being allegedly utilized by the CIA in the past years, with several projects - like the Sonic Screwdriver - that need physical contact to a targeted device to actually infect it.
WikiLeaks explained that the Sonic Screwdriver has the ability to infect a peripheral device of a Mac computer and subsequently attack the software even when its firmware is protected with a password.
The organization has also exposed "NightSkies 1.2," another alleged CIA project that can attack iPhone units. Interestingly though, WikiLeaks suggests that the CIA has been targeting "factory fresh iPhones" since 2008 with the NightSkies 1.2.
Meanwhile, on the same TechCrunch report, everyone is advised to keep their devices updated with the latest security patch, keep a strong password, install updates through the Settings app (not iTunes) and avoid exposing their gadgets from physical contact of suspicious people or external hardware.
