A team of cybersecurity researchers has revealed a way to exploit a vulnerability in Apple's Tap to Pay system, enabling them to steal money from a locked iPhone.

The attack was demonstrated by popular YouTube channel Veritasium and involves tricking an iPhone into thinking it's making a payment at a mass transit terminal. This exploits Apple's "Express Transit" feature, which allows payments without unlocking the device.