Apple iOS Quick Look Component Vulnerability

Apple iOS is an operating system developed by Apple Inc. for mobile devices.Quick Look is one of the components used to view common resource files. A security vulnerability exists in the Quick Look component in Apple iOS versions prior to 10.3. The vulnerability can be exploited by a remote...

CVE-2016-9319

There is Missing SSL Certificate Validation in the Trend Micro Enterprise Mobile Security Android Application before 9.7.1193, aka VRTS-398...

CVE-2016-9319

The CVE-2016-9319 entry concerns Trend Micro Enterprise Mobile Security for Android. Connected sources confirm that versions prior to 9.7.1193 lack SSL certificate validation, enabling potential Man-in-the-Middle attacks (MITM) by presenting forged certificates (VRTS-398). Impact is described as ...

Android Package Inspector: Inspeckage

Inspeckage is a tool developed to offer dynamic analysis of Android applications. By applying hooks to functions of the Android API, Inspeckage will help you understand what an Android application is doing at runtime. Inspeckage will let you interact with some elements of the app, such as...

Comodo Mobile Security - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Comodo Mobile Security published at the 'play' market has multiple vulnerabilities...

Google Touts Progress in Android Security in 2016

SAN FRANCISCO–Google has a daunting task of scanning 750 million Android devices daily for threats and checking 6 billion apps for malware each day as part of its management of 1.6 billion active Android devices. The numbers are staggering for Adrian Ludwig, director of Android Security; six year...

Google Android Qualcomm Video Driver Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA. An elevation of privilege vulnerability exists in Google Android Qualcomm Video Driver, which can be exploited by an attacker to enable a malicious application to execute arbitrar...

Samsung KNOX Heap Overflow Vulnerability

Samsung KNOX is a suite of enterprise mobile security solutions from Samsung South Korea. The program offers features such as device protection, management and development options. A heap overflow vulnerability exists in the Samsung KNOX Extended OTP Service, which can be exploited by an attacker...

Wi-Fi Signal Interference Can Leak Your Passwords and Keystrokes

Hackers can steal your sensitive information, such as your Passwords, PINs and Keystrokes, from your phone by observing changes in the wireless signal as you enter them into your smartphones. A group of researchers from the Shanghai Jaio Tong University, the University of South Florida and the...

Commodity 'Exaspy' Spyware Targets High-Level Execs

Researchers say they have discovered commodity Android spyware called Exaspy being used to spy on executives. The spyware, according to Skycure Research Labs, is being sold as a $15-a-month turnkey service online and can be used to intercept nearly all phone-based communications including phone...

Symantec Norton Mobile Security for Android Security Bypass Vulnerability

Symantec Norton Mobile Security for Android is the United States Symantec Symantec, Inc. based on the Android platform for mobile devices to provide security features of the software. A security bypass vulnerability exists in versions of Symantec Norton Mobile Security for Android prior to 3.16. ...

Symantec Norton Mobile Security for Android Denial of Service Vulnerability

Symantec Norton Mobile Security for Android is the United States Symantec Symantec, Inc. based on the Android platform for mobile devices to provide security features of the software. A denial of service vulnerability exists in versions of Symantec Norton Mobile Security for Android prior to 3.16...

Symantec Norton Mobile Security for Android Local Information Disclosure Vulnerability

Symantec Norton Mobile Security for Android is a set of software from Symantec Symantec that provides security for mobile devices based on the Android platform. A local information disclosure vulnerability exists in versions of Symantec Norton Mobile Security for Android prior to 3.16. A local...

Mobile Applications Leak Device, Location Data

Both Android and iOS apps leak data, leaving users vulnerable to data theft, denial-of-service attacks, and remote SIM card rooting. In a report released Thursday “Are mobile apps a leaky tap in the enterprise?” researchers at Zscaler assert that Android and iOS users are equally vulnerable to a...

Malicious Links Top Source of Mobile Trojans

Cheetah Mobile says the scourge of Ghost Push malware is still taking its toll on Android devices nearly two years after making its debut. Now the research firm is trying to track down how Ghost Push and other Trojans have remained so prolific despite mitigation efforts. In a report released Frid...

1 4 million Android devices by the Linux TCP vulnerability-vulnerability warning-the black bar safety net

The vast majority of Android users to pay attention to. Mobile Security vendor Lookout researchers have found that the Linux TCP connection vulnerability exist in the world 8 0% of Android devices, from about 1 4 million Android smartphones, tablets affected by this vulnerability. ! Shortly befor...

Cybersecurity Tips for the Rio Olympics

As the 2016 Olympic Games begin in Rio de Janeiro, US-CERT reminds travelers to be aware of cybersecurity risks. At high-profile events, hacktivists may take advantage of the large audience to spread their message. Cyber criminals may attempt to steal personally identifiable information or harves...

Google's Android Rewards Program Pays Out Half Million in First Year

Google wrapped up the first year of its Android Security Rewards program this week, a span of time that saw the company pay out just north of half a million dollars to security researchers who helped identify vulnerabilities in the mobile operating system. In all, the company paid 82 researchers ...

Pwned by Vpon

Vpon is one of many mobile ad SDKs marketed towards mainland Chinese and Taiwanese developers and app users. Recently, FireEye mobile security researchers identified a branch of Vpon ad SDK on iOS containing code that allows a malicious actor be it the app developer or the SDK creator to remotely...

CVE-2016-3664

Trend Micro Mobile Security for iOS is affected (pre-3.2.1188). The issue is failure to validate the X.509 certificate of the login server, enabling MITM attackers to spoof the server and solicit sensitive data via a crafted certificate. Affected product: Trend Micro Mobile Security for iOS; vuln...