Vulnerability in Find My Phone service and weak passwords may explain alleged celebrity photo leaks
The Next Web is reporting that a vulnerability in the Find My Phone service may have allowed attackers to brute-force passwords in order to access the iCloud accounts of celebrities.
The vulnerability allegedly discovered in the Find my iPhone service appears to have allowed attackers to use this method to guess passwords repeatedly without any sort of lockout or alert to the target. Once the password has been eventually matched, the attacker can then use it to access other iCloud functions freely.
A tool to exploit the weakness was uploaded to Github, where it remained for two days before being shared on Hacker News …
Expand
Expanding
Close
