Apple’s Attest API tool aims to tighten app security

Apple released a new tool for developers that aims to better protect the user data that flows through iOS apps. The company’s App Attest API, a new software tool meant to “protect against security threats to your app on iOS 14 or later, reducing fraudulent use of your services,” according to an Aug. 3 bulletin to developers. App Attest API generates a cryptographic key on a user’s device that aims to authenticate that an app is what it appears, and ensure that a phone isn’t transmitting user data to a fraudulent app designed to steal their usernames and passwords or other information. Security researchers specializing in iPhones have long said that it’s difficult to determine whether hackers have successfully breached an individual device, in part because of the way Apple limits visibility onto its machines. If an app is trying to exceed its authorized permissions, it’s a challenge for forensic […]

The post Apple’s Attest API tool aims to tighten app security appeared first on CyberScoop.

Continue reading Apple’s Attest API tool aims to tighten app security