Security flaw puts iPhone users at risk of phishing attacks

A flaw in Apple's implementation of SCEP makes it relatively trivial for a hacker to generate a malicious configuration profile that looks legitimate to users and funnels e-mail, Web, or VPN traffic to a malicious server.

See original: Digg Security flaw puts iPhone users at risk of phishing attacks