September 23, 2013 - 10:40 AMT
iOS 7 security flaw provides access to photos, contacts

An iOS 7 security bug has been found which provides access to an iPhone owner's photos and contacts, Digital Spy said.

Jose Rodriguez, a soldier from the Canary Islands, reported the flaw to Forbes, along with a video showing how a few clicks can break into iOS 7's camera app.

As The Guardian reveals, Apple says it will fix an embarrassing security flaw on its new iOS 7 software which hackers showed can bypass the lockscreen and access personal data.

The flaw, discovered within hours of iOS 7 becoming publicly available, can be exploited on the iPhone 4S and 5 and gives access to personal data including email, photos, Twitter, Facebook and Flickr. It is exploited via the Control Center function, which is found by swiping up from the bottom of the screen. That offers access to the phone user's alarms, a calculator, and the camera, as well as frequently-used settings such as Wi-Fi, Bluetooth and Airplane mode.

It appears not to work on the iPhone 5S and 5C.

From the alarms screen, a hacker can use a combination of button presses to access the multitasking manager, bypassing the lockscreen. That offers access to some user data including photos, email, Twitter, Facebook and Flickr accounts: an intruder can email or delete photos, send tweets, read and make Facebook posts and messages, and send text messages, though not read email.

"Apple takes user security very seriously," an Apple spokesman told the Guardian. "We are aware of this issue, and will deliver a fix in a future software update."