Apple Pay Can be Abused to Make Contactless Payments From Locked iPhones

Cybersecurity researchers have disclosed an unpatched flaw in Apple Pay that attackers could abuse to make an unauthorized Visa payment with a locked iPhone by taking advantage of the Express Travel mode set up in the device's wallet. "An attacker only needs a stolen, powered on iPhone. The...

The vulnerability of the iOS operating system allows a perpetrator to gain access to sensitive information about ongoing payments.

The vulnerability of the Apple Pay component in the iOS operating system is related to the lack of protection for operational data. Exploiting this vulnerability could allow a malicious actor, acting remotely, to gain access to sensitive information about ongoing payments by reviewing log files...