On the macOS Keychain Attack, Signal’s New Contact Service, the Deloitte Hack, and More

Mike Mimoso and Chris Brook recap the news of the week, including the macOS Keychain attack, Signal’s new private contact discovery service, the Deloitte hack, and a handful of mobile stock trading app vulnerabilities. Download: ThreatpostNewsWrapSeptember292017.mp3 Music by Chris Gonsalves Show...

Palm North App has multiple vulnerabilities

Palm Shang Beiguo APP is a comprehensive mobile media platform created by Shijiazhuang Beiren Group, which integrates online shopping, member services, e-membership, member e-wallet, integral activities, coupon issuance, parking, navigation, scheduling, seat selection and other services. There ar...

July 25, 2017 – Morning Cyber Coffee Headlines – “Henry Ford” Edition

Good morning! Sit with Carbon Black this morning over a cup of coffee or tea and browse a few industry headlines to get the day started. We’ve got just enough information below to get you through that first cup…enjoy! July 25, 2017 - Headlines UK gov wants teens to practice cybersecurity in their...

Meetup - Exported components, External URLs, Possible privilege escalation vulnerabilities

HackApp vulnerability scanner discovered that application Meetup published at the 'play' market has multiple vulnerabilities...

Kaspersky analyst: hackers can utilize APP vulnerability control smart cars-vulnerability warning-the black bar safety net

According to the British "Daily Mail" 2017 2 May 20 reported that the now more and more car owners by the car manufacturers provide a mobile app for your own car operate. However, Kaspersky Lab analysts have detected a large number of APP system vulnerabilities, hackers can by these vulnerabiliti...

Crédit Mutuel - Corrupted files, Dangerous filesystem permissions, Exported components vulnerabilities

HackApp vulnerability scanner discovered that application Crédit Mutuel published at the 'play' market has multiple vulnerabilities...

PURE Fling, Flirt & Hookup App - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application PURE Fling, Flirt & Hookup App published at the 'play' market has multiple vulnerabilities...

Get Followers - Base64 encoded String, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application Get Followers published at the 'play' market has multiple vulnerabilities...

Clal Insurance - External URLs, SD-card access, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Clal Insurance published at the 'play' market has multiple vulnerabilities...

Kitchen Radio (Music player) - External URLs, SD-card access, Unsafe deleting vulnerabilities

HackApp vulnerability scanner discovered that application Kitchen Radio Music player published at the 'play' market has multiple vulnerabilities...

vouchercloud: deals & offers - Dangerous filesystem permissions, MIT license, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application vouchercloud: deals & offers published at the 'play' market has multiple vulnerabilities...

Sniper Fury - Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Sniper Fury published at the 'play' market has multiple vulnerabilities...

奇跡のスプーン【落ちてくる球を受け止めよ】 - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application 奇跡のスプーン【落ちてくる球を受け止めよ】 published at the 'play' market has multiple vulnerabilities...

train cancan[Free] - BSD license, MIT license vulnerabilities

HackApp vulnerability scanner discovered that application train cancanFree published at the 'play' market has multiple vulnerabilities...

Little People™ Player - Base64 encoded String, Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Little People™ Player published at the 'play' market has multiple vulnerabilities...

Numbers For Ducklings - Dangerous filesystem permissions, Insecure KeyStore vulnerabilities

HackApp vulnerability scanner discovered that application Numbers For Ducklings published at the 'play' market has multiple vulnerabilities...

Kids ABC Letters (Lite) - External URLs, Native code usage, SD-card access vulnerabilities

HackApp vulnerability scanner discovered that application Kids ABC Letters Lite published at the 'play' market has multiple vulnerabilities...

Girls Coloring Little Fairies - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Girls Coloring Little Fairies published at the 'play' market has multiple vulnerabilities...

Make Gummy Bear - Candy Maker - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Make Gummy Bear - Candy Maker published at the 'play' market has multiple vulnerabilities...

My own puzzle - Base64 encoded String, Exported ContentProvider, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application My own puzzle published at the 'play' market has multiple vulnerabilities...