App User Advisory - Apple released updates to fix security vulnerability
On Feb 21st, Apple released updates to its operating systems that fix a major security vulnerability affecting all Apple devices.
Apple devices running iOS 7.0 to 7.0.5, iOS 6.0 to 6.1.5, and Mac OSX 10.9 to 10.9.1 contain a bug that does not verify a secure connection made over the internet. This bug allows an attacker to act as a "man-in-the-middle" and intercept data such as passwords, credit card numbers, emails, or other sensitive information. This bug affects the device's entire operating system and most applications running on the Apple platform.
This is an Apple operating system bug that affects all iOS apps on devices with the vulnerable OS.
We are committed to the safety and security of our customers' private data, and we take your trust in mobile technology as a privilege that we as an industry must all work to protect. As such, we have a responsibility to let you know what steps you can take to protect yourself.
It is recommended that all users of the NY Waterway iOS app upgrade their operating system to the latest version immediately to ensure their own security. Versions of iOS 6.1.6, iOS 7.0.6, and Mac OSX 10.9.2 fix this vulnerability. While avoiding untrusted, unsecured, or public wifi networks will decrease the likelihood of attack, the user will not be fully secure until the upgrade is performed.
About the security content of iOS 7.0.6 from Apple:
More information on the vulnerability: