“Apple’s website for Mac OS X, iPhone and iPad developers has a vulnerability that could lead to phishing attacks, according to a hacker group,” Ellen Messmer reports for Network World.
“The Apple website vulnerability could allow an attacker to specify a link to another site through a ‘redirect,’ which could simplify phishing attacks, claims the YGN Ethical Hacker Group,” Messmer reports. “The outfit, dedicated to finding website security flaws, is said to operate from the country of Myanmar.”
Messmer reports, “Unless Apple fixes the alleged vulnerability, the group says it plans to release information publicly in the next few days via the Full Disclosure security mailing list… YGN Ethical Hacker Group says it doesn’t want the discoveries it makes about vulnerabilities to be used for illegal hacking purposes, but to spur better security in commercial websites. The group says it informed Apple on April 25 about the ‘issues’ it discovered at the developer site. The group says Apple on April 27 acknowledged the receipt of the information, saying, ‘We take the report of a potential security issue very seriously.’ But as of yet, YGN Ethical Hacker Group does not believe the main security hole it identified has been fixed.”
Read more in the full article here.