[Null Byte]

[img]http://profileimages.guru.com/1/143/1143515/apple-logo-black-small1_768f5575-5f89-4f8e-b809-b97a52d0a858.png[/img]

Alert for: All iPhone devices without the iOS 7.0.6 patch

---

Vulnerabilities: CVE-2014-1266

---

Update: Go to Settings app > General > Software Update

---

Information:
Apple's latest 35.4 MB update of iOS 7.0.6 doesn't seem important at first, but it contains a critical security patch that addresses a flaw with SSL encryption.

Yes, a very critical security vulnerability that could allow hackers to intercept email and other communications that are meant to be encrypted in iPhone, iPad and Mac computer.

The vulnerability assigned CVE-2014-1266 and affects both the iOS and OS X operating systems, describes as 'Secure Transport failed to validate the authenticity of the connection. This issue was addressed by restoring missing validation steps.' in other words, anyone with a certificate signed by a "trusted CA" can perform Man-in-the-middle (MITM) attack.

Source: http://thehackernews.com/2014/02/apples-...iddle.html

[Wander]

Love my mac and this is very helpful. Appreciate the guide mate!