{"id":238,"date":"2014-02-25T21:19:49","date_gmt":"2014-02-25T21:19:49","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=238"},"modified":"2014-02-25T21:19:49","modified_gmt":"2014-02-25T21:19:49","slug":"fireeye-uncovers-background-monitoring-security-hole-in-ios-7","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/","title":{"rendered":"FireEye Uncovers Background Monitoring Security Hole in iOS 7"},"content":{"rendered":"

\"Security<\/a>According to a new post on the blog of FireEye, a threat prevention platform provider, their mobile security researchers have discovered ways to bypass Apple’s app review process effectively and exploit vulnerabilities in iOS 7 through background monitoring mobile applications.<\/p>\n

In the post FireEye states “We have created a proof-of-concept ‘monitoring’ app on non-jailbroken iOS 7.0.x devices. This ‘monitoring’ app can record all the user touch\/press events in the background, including, touches on the screen, home button press, volume button press and TouchID press, and then this app can send all user events to any remote server. Potential attackers can use such information to reconstruct every character the victim inputs.”<\/p>\n

The blog post goes on to note that the demo exploits the latest 7.0.4 version of iOS system on a non-jailbroken iPhone 5s device. In addition, FireEye verified that the same vulnerability also exists in iOS versions 7.0.5, 7.0.6 and 6.1.x. “Based on the findings,” the post concludes, “potential attackers can either use phishing to mislead the victim to install a malicious\/vulnerable app or exploit another remote vulnerability of some app, and then conduct background monitoring.”<\/p>\n

A link to the FireEye blog post and company site can be found here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"

According to a new post on the blog of FireEye, a threat prevention platform provider, their mobile security researchers have discovered ways to bypass Apple’s app review process effectively and exploit vulnerabilities in iOS 7 through background monitoring mobile applications. In the post FireEye states “We have created a proof-of-concept ‘monitoring’ app on non-jailbroken iOS […]<\/p>\n","protected":false},"author":1,"featured_media":239,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[],"acf":[],"yoast_head":"\nFireEye Uncovers Background Monitoring Security Hole in iOS 7 - Identity and Access Management Solutions | Solutions Review<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Doug Atkinson\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/\",\"name\":\"FireEye Uncovers Background Monitoring Security Hole in iOS 7 - Identity and Access Management Solutions | Solutions Review\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2014\/02\/FireEye-Uncovers-Background-Monitoring-Security-Hole-in-iOS-7.jpg\",\"datePublished\":\"2014-02-25T21:19:49+00:00\",\"dateModified\":\"2014-02-25T21:19:49+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/5992f02d38e7b28251ad933cd131dcae\"},\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2014\/02\/FireEye-Uncovers-Background-Monitoring-Security-Hole-in-iOS-7.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2014\/02\/FireEye-Uncovers-Background-Monitoring-Security-Hole-in-iOS-7.jpg\",\"width\":600,\"height\":331,\"caption\":\"Senior IT Leaders Express Concern About Identity, Access and the Internet of Things\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"FireEye Uncovers Background Monitoring Security Hole in iOS 7\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/5992f02d38e7b28251ad933cd131dcae\",\"name\":\"Doug Atkinson\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/092cfcbe5c7f2c185c21f152aada2d2f?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/092cfcbe5c7f2c185c21f152aada2d2f?s=96&d=mm&r=g\",\"caption\":\"Doug Atkinson\"},\"description\":\"An entrepreneur and executive with a passion for enterprise technology, Doug founded Solutions Review in 2012. He has previously served as a newspaper boy, a McDonald's grill cook, a bartender, a political consultant, a web developer, the VP of Sales for e-Dialog - a digital marketing agency - and as Special Assistant to Governor William Weld of Massachusetts.\",\"sameAs\":[\"https:\/\/solutionsreview.com\"],\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/doug-atkinson-4\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"FireEye Uncovers Background Monitoring Security Hole in iOS 7 - Identity and Access Management Solutions | Solutions Review","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/","twitter_misc":{"Written by":"Doug Atkinson","Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/","url":"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/","name":"FireEye Uncovers Background Monitoring Security Hole in iOS 7 - Identity and Access Management Solutions | Solutions Review","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2014\/02\/FireEye-Uncovers-Background-Monitoring-Security-Hole-in-iOS-7.jpg","datePublished":"2014-02-25T21:19:49+00:00","dateModified":"2014-02-25T21:19:49+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/5992f02d38e7b28251ad933cd131dcae"},"breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2014\/02\/FireEye-Uncovers-Background-Monitoring-Security-Hole-in-iOS-7.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2014\/02\/FireEye-Uncovers-Background-Monitoring-Security-Hole-in-iOS-7.jpg","width":600,"height":331,"caption":"Senior IT Leaders Express Concern About Identity, Access and the Internet of Things"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/fireeye-uncovers-background-monitoring-security-hole-in-ios-7\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"FireEye Uncovers Background Monitoring Security Hole in iOS 7"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/5992f02d38e7b28251ad933cd131dcae","name":"Doug Atkinson","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/092cfcbe5c7f2c185c21f152aada2d2f?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/092cfcbe5c7f2c185c21f152aada2d2f?s=96&d=mm&r=g","caption":"Doug Atkinson"},"description":"An entrepreneur and executive with a passion for enterprise technology, Doug founded Solutions Review in 2012. He has previously served as a newspaper boy, a McDonald's grill cook, a bartender, a political consultant, a web developer, the VP of Sales for e-Dialog - a digital marketing agency - and as Special Assistant to Governor William Weld of Massachusetts.","sameAs":["https:\/\/solutionsreview.com"],"url":"https:\/\/solutionsreview.com\/identity-management\/author\/doug-atkinson-4\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/238"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=238"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/238\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/239"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=238"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=238"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=238"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}