FCC, FTC Investigate Mobile Security Update Practices

The glowing lack of public, real-world Stagefright exploits didn’t stop the U.S. government from using last summer’s blockbuster Android vulnerability as an illustration of the dangers facing mobile device users. Under the context of Stagefright exposing up to 1 billion devices to attack, the...

FCC takes initiative to Speed Up Mobile Security Updates

In Brief The Smartphone users are fed up with slow security updates, so two United States federal agencies have launched an official inquiry to know how manufacturers and carriers deal with mobile phone security updates and what they are doing to roll out patches as quickly as possible. The...

CBS Sports App Transmitted Data Unencrypted

CBS recently fixed a vulnerability in its popular Sports application that could have exposed users to man-in-the-middle attacks and inadvertently leaked personal data. According to researchers, upon registration, users’ names, email addresses, account passwords, dates of birth, and zip codes were...

BSPB Mobile beta 2016 - BSD license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application BSPB Mobile beta 2016 published at the 'play' market has multiple vulnerabilities...

Antivirus & Mobile Security - Customized SSL, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Antivirus & Mobile Security published at the 'play' market has multiple vulnerabilities...

AVG Cleaner: boost your mobile - Customized SSL, Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application AVG Cleaner: boost your mobile published at the 'play' market has multiple vulnerabilities...

Mobile Security & Antivirus - Customized SSL, Exported components, External URLs vulnerabilities

HackApp vulnerability scanner discovered that application Mobile Security & Antivirus published at the 'play' market has multiple vulnerabilities...

NQ Mobile Security & Antivirus - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application NQ Mobile Security & Antivirus published at the 'play' market has multiple vulnerabilities...

Ali released 2 0 1 5 the mobile security vulnerability report-vulnerability warning-the black bar safety net

The first Chapter of 2 0 1 5-year application vulnerabilities 1.1 industry disclosure of the application vulnerability types and distribution 2 0 1 5 is an extraordinary year, all sectors of the media to the mobile application of the vulnerability degree of concern is also more and more high, the...

How to Steal Secret Encryption Keys from Android and iOS SmartPhones

Unlike desktops, your mobile devices carry all sorts of information from your personal emails to your sensitive financial details. And due to this, the hackers have shifted their interest to the mobile platform. Every week new exploits are discovered for iOS and Android platform, most of the time...

How To Keep Your Android Phone Secure

As the number of threats is on the rise, Android platform is no longer safe, which isn't a surprise to anyone. Most of us are usually worried more about the security of our desktops or laptops and forget to think about the consequences our smartphones can make if compromised or stolen. Unlike...

Zemana Mobile Security - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Zemana Mobile Security published at the 'play' market has multiple vulnerabilities...

AndroL4b - A Virtual Machine For Assessing Android applications, Reverse Engineering and Malware Analysis

AndroL4b is an android security virtual machine based on ubuntu Mate includes the collection of latest framework, tutorials and labs from different security geeks and researcher for reverse engineering and malware analysis. Tools APKStudio Cross-platform Qt5 based IDE for reverse-engineering...

1-Click Way to Check If your Android Device is Vulnerable to Hacking

Vulnerabilities are common these days and when we talk about mobile security, this year has been somewhat of a trouble for Android users. Almost every week we come across a new hack affecting Android devices. One of the serious vulnerabilities is the Stagefright Security Bug, where all it needed ...

The vulnerability of the iOS operating system allows a perpetrator to replace the security certificate.

The vulnerability of the iOS operating system’s OCSP client stems from the lack of checks for verifying the expiration date of the certificate. Exploiting this vulnerability allows a malicious actor to replace the security certificate remotely...

用友企业空间APP权限绕过泄露大量内部资料

简要描述： 也来玩玩移动安全 详细说明： 网址为 http://upesn.com。在web版里只找到几个xss，于是下载了app看看。 然而app用了360的加密，菜鸟表示不知道怎么逆向了。。 smali └── com └── qihoo └── util └── StubApplication.smali 虚拟机运行app抓包，终于找到个有问题的地方： 这里会有个请求： 其中的id就是该企业的公告id，可以通过修改id越权查看其他企业的公告。 用 burp suite 跑了下： 一大堆内部资料。。 漏洞证明： img...

Than the gourd baby is also scary Baidu full system APP SDK vulnerability - WormHole wormhole vulnerability analysis report-vulnerability warning-the black bar safety net

”You can’t have a back door in the software because you can’t have a back door that's only for the good guys.“ - Apple CEO Tim Cook ”You should not give software to install the back door because you can't guarantee that this Backdoor only the good guys can use.” – Apple CEO cook 0x00 sequence The...

MobSF (Mobile Security Framework) - Mobile (Android/iOS) Automated Pen-Testing Framework

Mobile Security Framework MobSF is an intelligent, all-in-one open source mobile application Android/iOS automated pen-testing framework capable of performing static and dynamic analysis. We've been depending on multiple tools to carry out reversing, decoding, debugging, code review, and pen-test...

The rice client SDK is aeration can hijack all of the user's SMS-vulnerability warning-the black bar safety net

Mobile App developers are faced with how to be profitable with this inevitable problem, which is the most common method is the application of added advertising. Advertising Alliance to create a function library that facilitate developers the ads which, to start quickly to make money. We previousl...

Kemoge Malicious Adware Campaign

Google has been busy removing a number of apps from Google Play that are disguised as popular selections that are actually pushing what starts out as adware but eventually turns more malicious. Google has already yanked down a file-transfer app called ShareIt, developed by Zhang Long of China, wh...