The details: According to the researcher, the attack starts with an email made to overwhelm the Mail app. Once the email is received (iOS 13) or clicked (iOS 12), it could allow a remote hacker access to your device. The attack does not require a large email, either, according to the researcher. Since when? The vulnerability has reportedly existed since iOS 6 and the iPhone 5, though the researcher only claims 2018 as the earliest examples found “in the wild.” Who is affected: Anyone who owns an iPhone or iPad is at this point a potential target. It’s not likely hackers want to control your iPhone, however. The researcher claims that individuals from an unnamed Fortune 500 company from North America, an executive from a Japanese carrier, a VIP in Germany, and a journalist in Europe have been hacked using this method. What to do: Until Apple issues a patch, you can stop using Mail on iOS to avoid the issue altogether. Apparently, iOS 13.4.5 beta has the patched files, so you could try upgrading to that, though it comes with a host of caveats around using beta software. You can also use a third-party app like Gmail to avoid the issue altogether until the patch is out of beta.
