CITY, State (Fox News) — Thousands of iOS apps approved by Apple contain hidden security flaws, leaving user data vulnerable.

## What researchers discovered inside iOS apps
Security researchers at Cybernews found over 815,000 hidden secrets in the code of more than 156,000 iPhone apps. These include sensitive information like passwords and API keys, making it easy for attackers to access.

## Cloud storage leaks exposed huge amounts of data
More than 78,000 iOS apps had direct links to cloud storage buckets, exposing over 76 billion files and 406 terabytes of data. This leaked data included user uploads, registration details, and private records.

## Firebase databases were also left open
Over 51,000 Firebase database links were found in app code, with some having no authentication. This exposed nearly 20 million user records, messages, profiles, and activity logs.

## Payment and login systems were at risk too
Leaked secrets included keys for payment platforms like Stripe and authentication systems for logins. Attackers could issue refunds, access billing details, or impersonate users with these secrets.

## AI and social apps were among the worst offenders
Apps related to artificial intelligence were found to be leaking user data, with the worst case being Chat & Ask AI by Codeway. Millions of users’ chat histories, phone numbers, and email addresses were exposed.

## Why Apple’s App review can miss hidden security risks
Apple’s review process does not scan app code for hidden secrets, leaving vulnerabilities undetected. Developers must fix these issues, but it can break features and delay updates.

## Ways to stay safe right now
To reduce the risk of data leaks, stick to established developers, review app permissions, delete unused apps, be cautious with personal information, use a password manager, and monitor accounts for unusual activity.

Kurt “CyberGuy” Knutsson advises staying alert and limiting data shared due to basic security mistakes in trusted iPhone apps.

(Source: Fox News)