Security researchers from Indiana University and the Georgia Institute of Technology have found security holes in iOS and OSX that allows any malicious app to steal passwords from Keychain. Keychain is Apple's password manager service that allows you to save login credentials, card details and more. To make matters worse, the six member team was able to upload a malicious app containing the malware to the Apple app store without any issues. The lead researcher had informed Apple months ago and agreed to the company's request to not make the exploit public for the next six months. However, he has not heard back from Apple since then. The zero-day security exploit is also capable of breaking app sandboxes and stealing their password and other sensitive data. Researcher Luyi Xing said that the security exploit is still present in iOS and OS X, which means that it can be taken advantage of by people with malicious intents.