VULNERABILITIES IN COCOAPODS OPEN THE DOOR TO SUPPLY CHAIN ATTACKS AGAINST THOUSANDS OF IOS AND MACOS APPLICATIONS

Summary from the TLDR InfoSec newsletter

Researchers from Evasec have found vulnerabilities in CocoaPods that could let attackers insert malicious code into popular iOS and macOS apps by claiming ownership of unclaimed pods. Developers using CocoaPods should check their open source dependencies for security risks, as these vulnerabilities could lead to supply chain attacks affecting thousands of Apple device apps. CocoaPods has addressed the vulnerabilities, but organizations should follow security steps to protect their code from potential exploits.