New Open Source Bugs Leave Thousands of iOS Apps Vulnerable to Hijacking [Video]

A series of newly discovered vulnerabilities in a widely used open source software utility could spell big trouble for large parts of the iOS and MacOS ecosystems. The bugs in question could impact thousands of widely used apps, including popular programs like TikTok, Snapchat, LinkedIn, Netflix, Microsoft Teams, Facebook Messenger, and many others, according to associated security research. While the open source components themselves have been patched, DevOps teams for impacted apps are surely scrambling to ensure that their systems are properly updated to protect users from potential exploitation.

The vulnerabilities were discovered in Cocoapods, a dependency manager widely used for software projects coded in the Swift and Objective-C programming languages. Dependency managers are vital tools in the software development process, allowing for the validation and cryptographic signing of software packages. The corruption of such a tool obviously has big (and bad) implications for large parts of the web.

The Cocoapods …