Apple forgot to sanitize the Phone Number field for lost AirTags

[vegetassj4]

“Instead of seeding a target's parking lot with USB drives loaded with malware, an attacker can drop a maliciously prepared AirTag.”

Apple forgot to sanitize the Phone Number field for lost AirTags

Another bug-bounty boondoggle leads to public disclosure before the bug is fixed.

arstechnica.com