【Watch Power】

A newly disclosed iPhone vulnerability gives hackers yet another reason to love email.

According to the San Francisco-based security firm ZecOps,Watch Power bad actors have discovered a way to attack iOS devices via their default email app. And here's the real kick to the guts: In some cases, you don't even have to be tricked into opening the email. The damage is done simply by your phone downloading the malicious email in the background.

ZecOps published details of the vulnerability on Monday, claiming it has seen the attack "widely exploited in the wild." In other words, ZecOps is saying this isn't just some theoretical bug. Rather, people have actually used it in targeted attacks. The vulnerability affects, to some degree, every version of Apple's operating system from iOS 6 and up.

---

You May Also Like

---

---

"The vulnerability allows remote code execution capabilities and enables an attacker to remotely infect a device by sending emails that consume significant amount of memory," explains ZecOps. "The vulnerability can be triggered before the entire email is downloaded, hence the email content won’t necessarily remain on the device."

Phones running iOS 13 are particularly vulnerable, as they reportedly don't even need to open the email for it to do its work. If you're running iOS 12, you're a tad bit better off — you have to click the email first, but your phone is ultimately still at risk if you do so.

Mashable Light Speed Want more out-of-this world tech, space and science stories? Sign up for Mashable's weekly Light Speed newsletter. By clicking Sign Me Up, you confirm you are 16+ and agree to our Terms of Use and Privacy Policy. Thanks for signing up!

We reached out to Apple to both confirm ZecOps report and to determine when, if ever, it plans to issue a patch. Apple confirmed that a vulnerability in Mail is patched in the iOS 13.4.5 beta, which is out now, and will be included in an upcoming software update.

This, reportedly, is what a failed attack looks like on an iPhone. Credit: zecops

At present, assuming you're not running a beta version of iOS, ZecOps says there is no way to prevent this attack other than to disable the default iOS mail app.

So, should you actually be worried about this? Well, that depends. Are you someone with valuable information that a nation-state might want a piece of? If so, then possibly.

Victims of this attack, claims ZecOps, include "individuals from a Fortune 500 organization in North America," "an executive from a carrier in Japan," "a VIP from Germany," "[managed security service providers] from Saudi Arabia and Israel," and "a Journalist in Europe."

SEE ALSO: As coronavirus spreads, yet another company brags about tracking you

In other words, your average Joe doesn't need to stress about this too much.

Still, it's worth keeping in mind that no operating system is completely hack-proof. And yes, that even includes Apple's. Oh yeah, and it also serves as a stark reminder that you should always make sure your phone is running the latest version of iOS — whether you're an average Joe or not.

Topics Apple Cybersecurity iOS iPhone

• Games
• Life
• Entertainment
• Science
• Deals
• Digital Culture
• Social Good
• Tech

• Testing Windows 10 Performance Before and After the Meltdown Flaw Emergency Patch
• The Urbane Turkey
• Squeaky Wheels
• The Morning News Roundup for November 14, 2014
• Commissioning Misleading Core i9
• The Morning News Roundup of November 26, 2014
• Visit Our Holiday Pop
• The Windows on the World Contest Finalists
• NYT Strands hints, answers for April 26
• Preparation for the Next Life

• 'The Big Bang Theory' series finale review: It's about time
• The bizarre reason why several Facebook Groups just changed their privacy settings
• Crazy 5G video makes 4G look like garbage
• The National Lottery hack is why you shouldn't reuse your password
• 'Game of Thrones' Weekly: Very little to talk about before the finale
• The fastest way to create a burner email account
• 'Game of Thrones': Why Bran Stark could end up on the Iron Throne
• America's 8 most wanted household pets and barnyard animals
• Spotify's first piece of hardware is a voice assistant for your car
• Hillary Clinton surprised us all by introducing Katy Perry at a UNICEF gala

• Best robot vacuum deal: Get the Shark Matrix Plus 2
• The Urbane Turkey
• Mark Strand, 1934–2014
• Barry Gifford’s Novels Find a New Generation of Readers
• Apple is reportedly still working on smart glasses of some kind
• Call Me Madam Pipi
• Sleep of the Just by Sadie Stein
• The Morning News Roundup for November 11, 2014
• NYT Connections Sports Edition hints and answers for April 23: Tips to solve Connections #212
• On Samuel Rutherford Crockett and the Word “Draffsack”

• Best iPad deal: Save $132 on Apple iPad (10th Gen)
• The Morning News Roundup for November 14, 2014
• Writing Tennessee Williams’s Life
• A Marvelous Crutch: An Interview with Brad Zellar
• Best Max streaming deal: Save 20% on annual subscriptions
• The Morning News Roundup of November 26, 2014
• Mark Strand, 1934–2014
• Douglas Coupland’s Gumhead
• Better Buy: Previous
• Emma, Cover to Cover by Dan Piepenbring