Researchers Warn of Vulnerabilities in iOS, Android

by Developer.com Staff

The Apple bug generates fake invoices; the Android bug spreads via text.

Independent researchers have issued warnings about critical security vulnerabilities in both of the two biggest mobile platforms. The iOS bug is related to the invoicing system for the App Store and iTunes, and it represents a threat to both end users and mobile development firms. According to Benjamin Kunz Mejri from Vulnerability Lab, who found the bug, "The invoice is present to both parties (buyer & seller) which demonstrates a significant risk to buyers, sellers or apple website managers/developers."

The Android vulnerability, dubbed Stagefright, can spread malware simply by sending a text message to a user's smartphone. Approximately 95 percent of Android devices are vulnerable. Joshua J. Drake of Zimperium zLabs called it one of the "worst Android vulnerabilities discovered to date."

View article

This article was originally published on Tuesday Jul 28th 2015
Mobile Site | Full Site