Wikileaks' CIA Hacking Dump: Apple, Samsung vow to fix flaws

Apple and Samsung vowed yesterday to quickly fix any vulnerabilities in their products following WikiLeaks' disclosure of an alleged CIA hacking arsenal capable of breaking into iPhones and other devices.

The archive released on Tuesday claims to show the CIA exploiting weaknesses it discovers in hardware and software systems -- without informing manufacturers of the flaws in question.

Tap here to add The Daily Star as a trusted source

"While our initial analysis indicates that many of the issues leaked today were already patched in the latest iOS, we will continue work to rapidly address any identified vulnerabilities," Apple said in an emailed statement.

"We always urge customers to download the latest iOS to make sure they have the most recent security updates."

Samsung offered a similar response.

"Protecting consumers' privacy and the security of our devices is a top priority at Samsung," a statement from the South Korean electronics giant said.

"We are aware of the report in question and are urgently looking into the matter."

The whistleblowing foundation claims the document dump reveals full details of the CIA's 'global covert hacking program', including 'weaponised exploits' used against operating systems including Android, iOS, Linux, macOS, Windows and "even Samsung TVs, which are turned into cover microphones".

The documents claim that CIA's Mobile Devices Branch has created multiple tools for hacking both Android and iOS smartphones, enabling it to remotely acquire location data, audio and text communications, and to switch on the phones' camera and microphones at will.

Microsoft's Windows OS is also named a target, with WikiLeaks noting that "the CIA also runs a very substantial effort to infect and control Microsoft Windows users with its malware."

In response, Microsoft said vaguely that it is "aware of the report in question" and "urgently looking into the matter."

Linux has also fallen victim to the CIA's shady hacking tactics, according to the leak, but the Linux Foundation has yet to comment.

Human rights watchdog Privacy International has been quick to comment on the revelations.

"If today's leaks are authenticated, they demonstrate what we've long been warning about government hacking powers - that they can be extremely intrusive, have enormous security implications, and are not sufficiently regulated," a spokesperson told the INQUIRER.

"Insufficient security protections in the growing amount of devices connected to the internet or so-called "smart" devices, such as Samsung Smart TVs, only compound the problem, giving governments easier access to our private lives. If the CIA knew of security weaknesses in the devices many of us use - from "smart" phones to "smart" TVs - they should have been working with companies to fix the vulnerabilities, not exploit them.

"Privacy International continues to fight for transparency and accountability around government hacking and sharing powers, as well as improvements in the security of our networks and devices.

"Without such, we increasingly face a world where we are vulnerable in ways most of us cannot imagine, and our governments contribute to the problem as often as they try to fix it."