In shortthis exploit will directly expose the Apples Keychain and other apps including those of the third party.
This flaw has been confirmed by Apple, Google Chrome and others.
Apple also told the researchers to not disclose this flaw in public till they fixed this problem.
In February 2015 Apple requested the team to provide them an advance copy of their research paper.
It seems these apps which were vulnerable to attack were approved for both the operating systems.
As per the security research group,Googles Chromium security teamwas more responsive and theyremoved the Keychain integrationfor Chrome.
If my banking app creates a keychain item, malware will not have access.
Apple does not offer a convenient way to do so.
source: www.techworm.net
