Gmail iOS Vulnerability Discovered

As banking and other sensitive functions in society increasingly move to cell phones, another mobile phone security bug has been discovered, this one that puts iOS users at risk when using Gmail.

Lacoon, a mobile security firm, recently released details of the new vulnerability that allows hackers to view and even modify encrypted communication.

Goole's Gmail for iOS does not perform certificate pinning

The security firm’s research discovered that the Gmail iOS app, run on Macintosh mobile devices, does not perform certificate pinning. As a result allows attackers to use a Man-in-the-Middle (MitM) technique to impersonate a legitimate server using a spoofed SSL certificate. Such a...