Hacker News Reader

It's an RCE (out of sandbox) exploited when you load a web page in Safari. Everyone is equally vulnerable to this, and you should be frantically upgrading. People panicked about Heartbleed, and rightly so, but this is arguably much worse,

got a link handy to more detail?

Another comment mentioned this CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-3289...

Could be that other banks are equally vulnerable and just not disclosing it. Hard to know without some insider knowledge. We'll know in a few months if class action lawsuits start popping up.

Or...they don't want bad word of mouth after (many) someone(s) has their phone pwned and their BoA accts wiped out from within their own app..?

Maybe.

But...

If someone is using BoA and they have an issue related to this, are they going to blame BoA or are they going to blame Apple?