Apple Patches SSL Authentication Security Hole With iOS Update
Apple has issued updates for the iOS, patching a major flaw that could allow hackers to intercept email and other communications that are meant to be encrypted.
By taking advantage of the flaw, attackers with access to a mobile user's network - such an unsecured wireless service offered by a restaurant - could see or alter exchanges between the user and protected sites such as Facebook.
Apple released the iOS 6.1.6 (iPhone 3GS, iPod touch 4th generation) and the iOS 7.0.6 (iPhone 4 and later, iPod touch 5th generation, iPad 2 and later), which both not to allow "an attacker with a privileged network position to capture or modify data in sessions protected by SSL/TLS."
Security researchers claim the same flaw existed in current versions of Mac OSX, running Apple laptop and desktop computers. No patch is available yet for that operating system, though one is expected soon.
Apple released the iOS 6.1.6 (iPhone 3GS, iPod touch 4th generation) and the iOS 7.0.6 (iPhone 4 and later, iPod touch 5th generation, iPad 2 and later), which both not to allow "an attacker with a privileged network position to capture or modify data in sessions protected by SSL/TLS."
Security researchers claim the same flaw existed in current versions of Mac OSX, running Apple laptop and desktop computers. No patch is available yet for that operating system, though one is expected soon.