LinkedIn caught snooping on the clipboard data of every keystroke, the issue was discovered with the beta version of iOS 14.
The LinkedIn iOS app is responsible for the privacy-intrusive behavior that spotted by a developer who goes with the twitter handle @DonCubed.
DonCubed noticed that while using LinkedIn on his iPad Pro, a service copying the keystrokes from the clipboard on his MacBook Pro.
The data snooping was discovered using the new mechanism introduced in iOS 14 that alerts users when some app is reading contents from the clipboard.
The new feature with iOS 14 is a good upgrade to privacy, iOS 14 also alerts users when an app accesses their camera or microphone.
With the new mechanism, @DonCubed found that “LinkedIn is copying the contents of my clipboard every keystroke. IOS 14 allows users to see each paste notification.”
LinkedIn’s consumer products’ VP Engineering Erran Berger said that copying behavior is not an intended one, he further added that “the contents of the clipboard are not stored or transmitted. A fix for the issue is in the works, and should be available soon.”
Earlier TikTok caught accessing the clipboard every few seconds and the company said they are to remove the feature.
Not only TikTok many other apps like Twitter, Starbucks, Overstock, AccuWeather, and more caught reading users clipboard data.
You can follow us on Linkedin, Twitter, Facebook for daily Cybersecurity and hacking news updates.
Also Read
Critical LinkedIn AutoFill Vulnerability Allow Hackers to Steal LinkedIn Users Sensitive Information
Hackers Abusing LinkedIn’s Direct Messaging Service to Deliver More_eggs Malware via Fake Job Offers
A critical command injection vulnerability in the popular systeminformation npm package has recently been disclosed, exposing millions…
Researchers discovered a malware campaign targeting the npm ecosystem, distributing the Skuld info stealer through…
An investigation revealed an intrusion in Asia involving the BellaCiao .NET malware, as the initial…
A seemingly benign health app, "BMI CalculationVsn," was found on the Amazon App Store, which…
The Lazarus Group has recently employed a sophisticated attack, dubbed "Operation DreamJob," to target employees…
NodeStealer, initially a JavaScript-based malware, has evolved into a more sophisticated Python-based threat that targets…