KeySteal could allow someone to steal your Apple Keychain passwords
The researcher says it works without root or administrator privileges and without password prompts. But he’s not revealing how it works to Apple because there’s no money for him in its invite-only/iOS-only bounties.
Story added 7. February 2019, content source with full text you can find at link above.