Tumblr, the blogging site recently acquired by Yahoo, has released a security update for its iPhone and iPad apps that it said addresses an issue that allowed passwords to be compromised in certain circumstances.
Users of the apps have been advised to update their passwords on Tumblr as there is a possibility that the password was “sniffed” in transit on networks in certain versions of the app, it said in a post on its staff blog. Tumblr recommended that users also change their passwords anywhere else that they were using the same password. It is good practice to use different passwords across different services by using password management apps, it said.
Tumblr did not provide additional information on the security update which it described as “very important.” The service has apps for Android and Windows Phone, but it appears that only the ones for iOS were affected.
Yahoo acquired Tumblr in June this year for about US$1.1 billion in a bid to address a younger audience. The company could not be immediately reached for further information on the security issue. Tumblr apologized in the post for the “lapse and inconvenience.”