It’s pretty well established that using public Wi-Fi introduces security risks, but now it has come to light that apps accessed over public Wi-Fi could be at risk as well.
Mobile security researchers from Skycure will demonstrate an attack that will show the vulnerability in the code within iOS apps, on Tuesday. Here is more from the Skycure blog:
While the problem is generic and can occur in any application that interacts with a server, the implications of HRH for news and stock-exchange apps are particularly interesting. It is commonplace for people to read the news through their smartphones and tablets, and trust what they read. If a victim’s app is successfully attacked, she is no longer reading the news from a genuine news provider, but instead phoney news supplied by the attacker’s server. Upon testing a variety of high profile apps, we found many of them vulnerable.
(Via The New York Times).