iLeakage Attack: Safeguarding Your Emails and Passwords on Apple Devices
Researchers have developed a new speculative side-channel attack called iLeakage that can extract sensitive information from the Safari web browser on recent Apple devices. This attack bypasses standard side-channel protections implemented by browser vendors and can steal data from Safari, Firefox, Tor, and Edge on iOS. The researchers were able to defeat side-channel protections and bypass site isolation policies in Safari, allowing them to leak sensitive data such as passwords and emails. The attack impacts Apple devices powered by Apple's A-series and M-series ARM processors. Apple has developed mitigations for macOS, but the attack highlights the potential risks of speculative execution in emerging ARM-based platforms.
