Binance warns of iOS 27 flaw that could expose ‘private keys and login credentials’
Macworld ·
Macworld Cryptocurrency exchange Binance has issued a warning that recent versions of iOS have a security vulnerability that can put Apple devices “at risk.” The vulnerability can be found in iOS 26.7.1, 27.0.1, and 27.2. Binance states that the vulnerability allows malicious software to “read local files from other apps, putting seed phrases, private keys, and login credentials at risk across the entire ecosystem.” However, the vulnerability can only be exploited if the malicious software was installed outside of the App Store. In other words, the malicious app has to be installed by sideloading or by a manually signed iOS App Store Package. That’s unlikely to happen outside of the EU, where Apple allows alternative app marketplaces and installation of apps outside of the App Store. The current version of iOS is 27.2.1, which was released on November 9, but it is not clear if that update includes a security fix that addresses the issue. Because the issue involves an unauthorized method of software installation, Apple may not address the issue immediately. How to protect your iPhone from malware Sideloading apps increases your chances of security risk. Software that is available on the App Store has been vetted for security issues. To minimize the chances of inadvertently installing malware, do not sideload apps on your iPhone and only use apps from the App Store. If you do sideload apps, understand that you have increased your risk. The easiest task to perform to secure your iPhone is to update the operating system. iOS can be updated in the Settings app by tapping General > Software Update . Apple also has a separate method for installing immediate security patches called Background Security Improvements. It is located in Settings > Privacy & Security , scroll to the bottom to find Background Security Improvements. Macworld has a list of tips for keeping your iPhone secure .