Apple iOS apps may be fooled, redirected via public Wi-Fi

Combining public Wi-Fi networks with Apple (NASDAQ:AAPL) iOS apps can result in a dangerous mix, given a coding issue uncovered by an Israeli startup. Skycure discovered a vulnerability it dubbed an HTTP Request Hijacking, according to Network World. The flaw could be used by an attacker to send a malicious link or fake news to a news application on an iPhone or iPad. The roots of such an attack would start via a man-in-the-middle attack over a public Wi-Fi network, in which the hacker accesses HTTP traffic between the app and the server that receives its requests and sends back data. By using what is called a 301 redirection, an attacker could steer queries from the app to the attacker's own server. There are so many iOS apps vulnerable to this type of attack that Skycure decided it would be easier to go public with its findings than to try and inform all of the relevant app developers. The good news is that the flaw does not impact the more secure HTTPS protocol. For more, see this article.