Independent researchers have issued warnings about critical security vulnerabilities in both of the two biggest mobile platforms. The iOS bug is related to the invoicing system for the App Store and iTunes, and it represents a threat to both end users and mobile development firms. According to Benjamin Kunz Mejri from Vulnerability Lab, who found the bug, "The invoice is present to both parties (buyer & seller) which demonstrates a significant risk to buyers, sellers or apple website managers/developers."
The Android vulnerability, dubbed Stagefright, can spread malware simply by sending a text message to a user's smartphone. Approximately 95 percent of Android devices are vulnerable. Joshua J. Drake of Zimperium zLabs called it one of the "worst Android vulnerabilities discovered to date."