Following a <a href="http://www.networkworld.com/article/2847857/mobile-security/u-s-government-issues-alert-about-apple-ios-masque-attack-threat.html">U.S. government warning about an iPhone and iPad security threat dubbed Masque Attack</a>, Apple has issued a statement assuring customers that they're probably okay.
Acting like a software version of a Transformer robot, a malware test app sneaked through Apple's review process disguised as a harmless app, and then re-assembled itself into an aggressive attacker even while running inside the iOS "sandbox" designed to isolate apps and data from each other.
Apple on Monday issued a new patch that fixes a vulnerability that could allow an attacker to spoof an X.509 certificate used to encrypt web sessions on 4.3.4 iOS devices.