Apple Disables Group FaceTime Following Reports of a Security Flaw that Allowed Eavesdropping

Apple Disables Group FaceTime Following Reports of a Security Flaw that Allowed Eavesdropping

A glitch in Apple's FaceTime app let users hear—and see—the other person even if the recipient never accepted the call.

  • By Sydny Shepard
  • Jan 30, 2019

Tech giant Apple has disabled the group chat function in their FaceTime app after security researchers found that the recipient of a call could be heard, sometimes even seen, without ever having answered the FaceTime call. The security flaw was widely reported on Monday leaving the company with no other option than disabling the feature until a fix could be found and rolled out.

The flaw is unusual for the iPhone maker as it prides itself on its strong privacy safeguards and comes at the height of scrutiny on technology companies that are often accused of violating users' privacy.

The security glitch was first reported by 9to5Mac, which wrong that the bug, "which was spreading virally over social media," lets you "immediately hear the audio coming from their phone." The trade publication listed in full detail the steps one would need to take to reproduce the glitch, which involved starting a FaceTime video call with an iPhone contact and then immediately adding your own phone number to the call. 

This move would trick the phone into starting a group FaceTime call and activate the other person's audio. If the recipient hit the power or volume button, the phone would broadcast video as well, The Verge reported.

The bug only worked on devices that had upgraded to iOS 12.1, which introduced group video calling. In a statement provided to several media outlets, Apple said it is "aware of this issue and we have identified a fix that will be released in a software update later this week."

About the Author

Sydny Shepard is the Executive Editor of Campus Security & Life Safety.

Featured

  • Maximizing Your Security Budget This Year

    Perimeter Security Standards for Multi-Site Businesses

    When you run or own a business that has multiple locations, it is important to set clear perimeter security standards. By doing this, it allows you to assess and mitigate any potential threats or risks at each site or location efficiently and effectively. Read Now

  • New Research Shows a Continuing Increase in Ransomware Victims

    GuidePoint Security recently announced the release of GuidePoint Research and Intelligence Team’s (GRIT) Q1 2024 Ransomware Report. In addition to revealing a nearly 20% year-over-year increase in the number of ransomware victims, the GRIT Q1 2024 Ransomware Report observes major shifts in the behavioral patterns of ransomware groups following law enforcement activity – including the continued targeting of previously “off-limits” organizations and industries, such as emergency hospitals. Read Now

  • OpenAI's GPT-4 Is Capable of Autonomously Exploiting Zero-Day Vulnerabilities

    According to a new study from four computer scientists at the University of Illinois Urbana-Champaign, OpenAI’s paid chatbot, GPT-4, is capable of autonomously exploiting zero-day vulnerabilities without any human assistance. Read Now

  • Getting in Someone’s Face

    There was a time, not so long ago, when the tradeshow industry must have thought COVID-19 might wipe out face-to-face meetings. It sure seemed that way about three years ago. Read Now

    • Industry Events
    • ISC West
Most   Popular

Featured Cybersecurity

Webinars

New Products

  • 4K Video Decoder

    3xLOGIC’s VH-DECODER-4K is perfect for use in organizations of all sizes in diverse vertical sectors such as retail, leisure and hospitality, education and commercial premises. 3

  • ResponderLink

    ResponderLink

    Shooter Detection Systems (SDS), an Alarm.com company and a global leader in gunshot detection solutions, has introduced ResponderLink, a groundbreaking new 911 notification service for gunshot events. ResponderLink completes the circle from detection to 911 notification to first responder awareness, giving law enforcement enhanced situational intelligence they urgently need to save lives. Integrating SDS’s proven gunshot detection system with Noonlight’s SendPolice platform, ResponderLink is the first solution to automatically deliver real-time gunshot detection data to 911 call centers and first responders. When shots are detected, the 911 dispatching center, also known as the Public Safety Answering Point or PSAP, is contacted based on the gunfire location, enabling faster initiation of life-saving emergency protocols. 3

  • Camden CM-221 Series Switches

    Camden CM-221 Series Switches

    Camden Door Controls is pleased to announce that, in response to soaring customer demand, it has expanded its range of ValueWave™ no-touch switches to include a narrow (slimline) version with manual override. This override button is designed to provide additional assurance that the request to exit switch will open a door, even if the no-touch sensor fails to operate. This new slimline switch also features a heavy gauge stainless steel faceplate, a red/green illuminated light ring, and is IP65 rated, making it ideal for indoor or outdoor use as part of an automatic door or access control system. ValueWave™ no-touch switches are designed for easy installation and trouble-free service in high traffic applications. In addition to this narrow version, the CM-221 & CM-222 Series switches are available in a range of other models with single and double gang heavy-gauge stainless steel faceplates and include illuminated light rings. 3