NewsSecurity Researchers Say 25,000 iOS Apps Contain Security Vulnerability

Security Researchers Say 25,000 iOS Apps Contain Security Vulnerability content and product recommendations are editorially independent. We may make money when you click on links to our partners. Learn More.

According to researchers at SourceDNA, 25,000 iOS apps are vulnerable to man-in-the-middle attacks thanks to a bug in AFNetworking SSL code. An earlier-discovered vulnerability in AFNetworking 2.5.1 left 1,500 apps open to attack. SourceDNA says, “A few weeks ago, we found that version 2.5.2 did fix this issue, but there was another flaw nearby in the same code.”

The company offered the following advice to mobile development firms relying on AFNetworking SSL encryption: “If you are using AFNetworking (any version) you must upgrade to 2.5.3. Also, you should enable public key or certificate-based pinning as an extra defense. Neither of these game-over SSL bugs affected apps using pinning.”

View article

Get the Free Newsletter!

Subscribe to Developer Insider for top news, trends & analysis

Latest Posts

Related Stories