The bug was spotted by Sherif Hashim, and according to his research, affects iPhones running on the very latest iOS 7.1.1. If you happen to own an up-to-date iPhone and stick with the default setting of enabling Siri on the lock screen, all anybody would need to do is reel off a “Call,†“Text,†or “Email†command, tap in the first letter of a contact, and Siri would get right to it. After tapping the first letter, an intruder could narrow things down by hitting the “Other†option, which would, in turn, expose the whole list of contacts.
This bug is totally different from the previous bugs, because now Siri can do everything from sending SMS, accessing contacts directly from the lock screen..
So we are telling you that you should go to Settings—->General—>Siri and prevent accessing Siri from the lock screen.. We will keep you updated with anything new.. Stay tuned.
(Source: NBCNews)