One Tap Too Far: Using Shortcuts to Bypass Chrome for iOS Call Prompts

Reported by Doyensec

Summary by Cyber Security News24 Sep 2026, 00:00 CEST

About this summary. This is a short, independently written summary of an article first published by Doyensec. Cyber Security News did not report or verify the underlying story. Read the original: https://blog.doyensec.com/2026/09/24/chrome-ios-policy-bypass.html

TL;DR While testing deep links in Chrome for iOS, we noticed a small but important difference. Opening a third-party app through a custom URL scheme normally produced a confirmation prompt. Shortcuts were an exception.

Read the full article at Doyensec →

Source attribution: headline and facts are from Doyensec (blog.doyensec.com). Summary method: excerpt of the source description. See our source attribution policy.