Apple release patch for a SSL security vulnerability - mSecLabs - MOBIQUANT Mobile Security Labs | mSecLabs - MOBIQUANT Mobile Security Labs

Apple has recently pushed an emergency update for iOS (7.0.6) that fixes a critical vulnerability that could allow hackers to intercept the user’s traffic (email, messages etc) and other communications that is meant to be encrypted. The vulnerability occurs in the logic some iOS applications use to authenticate themselves to the server over SSL (Secure Socket Layer). Because of this flaw, an attacker who is present on the same wired...

Read More

Blog Mobiquant : Apple's 'Gotofail' Security Mess Extends To Mail, Twitter, iMessage, Facetime And More

First, Apple revealed a critical bug in its implementation of  encryption in iOS, requiring an emergency patch. Then researchers found the same bug is also included in Apple’s desktop OSX operating system, a gaping Web security hole that leaves users of Safari at risk of having their traffic hijacked. Now one researcher has found evidence that the bug extends beyond Apple’s browser to other applications including Mail, Twitter, Facetime, iMessage...

Read More

iH8sn0w ANNOUNCES A PERMANENT BOOTROM EXPLOIT JAILBREAK FOR A5/A5X IOS DEVICES

iH8sn0w , the author of numerous jailbreak softwares, announced on Twitter that he has discovered a bootrom exploit for all Apple devices with A5/A5X processors. iH8sn0w Twitter message about his jailbreak new exploit In 2010, the hacker Geohot (aka George Hotz) had found a bootrom exploit called Limera1n, which formed the base for untethered jailbreak for devices running A4 processors. Unlike a security flaw in the ‘User Space’, which...

Read More