At the RSA security conference in San Francisco today, researchers from security firm Skycure presented ‘No iOS Zone’, a vulnerability that would let attackers crash any iOS device within range of a WiFi hotspot — whether you deliberately connect or not. Gulp.
The vulnerability takes advantage of a bug in iOS 8: namely, that by manipulating SSL certificates sent to iOS devices over a network — certificates used in virtually every app, and in iOS itself — the researchers could make iOS devices crash, in the worst-case scenario putting them into a constant boot-loop.
