Security researchers have discovered a major flaw in Express Transit on iPhone that allows hackers to steal money from a user’s Visa card. They say the problem can be easily fixed, but neither Apple or Visa seem interested.
The flaw makes it possible for iPhone’s contactless payment system, designed to make it easier and faster to pay for public transport, to be charged arbitrary transactions by a device that imitates a transport terminal.