Apple always advertised their iPhones as highly secure devices. Which makes this little bit more hilarious, when even the new iPhones after the latest iOS update are not hard to beat security vise.
Recently was posted this youtube video, which shows that is possible to bypass locked screen on iPhone with iOS 12 without having the password and easily access to photos and contacts.
Jose Rodrigues a security researcher found a sneaky way how to beat iPhones security. His process requires invoking Siri to enable Voiceover, After that he sends a message from another device to the iPhone. After this process, he double-taps at the right moment, which Gives you access to features and commands, which you should not be-able to access. Yes, they are invisible behind a white screen, but you can still Operate them by swiping across the screen. One of these then enables you the access to the iPhone’s contacts. Little more complicated process will let you access pictures on the iPhone, it is quite more complicated than accessing contacts, but you won’t need any special equipment for it.
The first video was in Spanish and it was done on iPhone 8, but recently came out a new video from channel EverythingApplePro, which clearly shows that the same bug is on iPhone XS Max with the newest iOS version 12.
Of course, attacker would need a physical access to the iPhone and few minutes to perform this process, but it is not something totally out of the question. I am sure that you asked in restaurant, café or bar to charge your iPhone aswell as I did. Luckily this hack won’t give attacker complete control of the locked iPhone, but even this is quite serious security issue.