Apple's iOS vulnerable to Man-in-the-middle Attack, Install iOS 7.0.6 to Patch
Feb 22, 2014
Apple's latest 35.4 MB update of iOS 7.0.6 doesn't seem important at first, but it contains a critical security patch that addresses a flaw with SSL encryption. Yes, a very critical security vulnerability that could allow hackers to intercept email and other communications that are meant to be encrypted in iPhone, iPad and Mac computer. Apple provides very little information when disclosing security issues, ' For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. ' said in the security advisory . Cryptography experts immediately tried to figure out what was wrong with Apple's implementation of Secure Sockets Layer (SSL) and the details are: Impact: The vulnerability assigned CVE-2014-1266 and affects both the iOS and OS X operating systems , describes as ' Secure Transport failed to validate the authent