Critical iOS Flaw allowed Hackers to Steal Cookies from Devices

Apple has patched a critical vulnerability in its iOS operating system that allowed criminal hackers to impersonate end users' identities by granting read/write access to website's unencrypted authentication cookies.



The vulnerability was fixed with the release of iOS 9.2.1 on Tuesday, almost three years after it was first discovered and reported to Apple.



The

Here's How Websites Are Tracking You Online

Webmasters can track all your activities on the Internet – even if you have already cleared your browsing history and deleted all saved cookies.



A researcher demonstrated two unpatched flaws that can be exploited to track Millions of Internet users, allowing malicious website owners:



List Building: To compile a list of visited domains by users, even if they have cleared their browsing

Exploiting Browser Cookies to Bypass HTTPS and Steal Private Information

A newly discovered critical flaw in the implementation of web cookies by major browsers could open secured (HTTPS) browsing to Man-in-the-middle attacks.



The US Computer Emergency Response Team (CERT) has revealed that all the main browser vendors have improperly implemented the RFC 6265 Standard, also referred to as "Browser Cookies," allowing…



…remote attackers to bypass secure HTTPS