January 24, 2021
Hot Topics:

Security Researchers Say 25,000 iOS Apps Contain Security Vulnerability

  • By Developer.com Staff

According to researchers at SourceDNA, 25,000 iOS apps are vulnerable to man-in-the-middle attacks thanks to a bug in AFNetworking SSL code. An earlier-discovered vulnerability in AFNetworking 2.5.1 left 1,500 apps open to attack. SourceDNA says, "A few weeks ago, we found that version 2.5.2 did fix this issue, but there was another flaw nearby in the same code."

The company offered the following advice to mobile development firms relying on AFNetworking SSL encryption: "If you are using AFNetworking (any version) you must upgrade to 2.5.3. Also, you should enable public key or certificate-based pinning as an extra defense. Neither of these game-over SSL bugs affected apps using pinning."

View article

This article was originally published on April 27, 2015

Enterprise Development Update

Don't miss an article. Subscribe to our newsletter below.

Thanks for your registration, follow us on our social networks to keep up-to-date