Security News This Week: The Cloud Company at the Center of a Global Hacking Spree

Plus: A framework for encrypting social media, Russia-backed hacking through Microsoft Teams, and the Bitfinex Crypto Couple pleads guilty...

Mischief To Couple - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Mischief To Couple published at the 'play' market has multiple vulnerabilities...

Talking Parrot Couple Free - Dangerous filesystem permissions, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Talking Parrot Couple Free published at the 'play' market has multiple vulnerabilities...

Couple Tracker -Mobile monitor - Base64 encoded String, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application Couple Tracker -Mobile monitor published at the 'play' market has multiple vulnerabilities...

Little Couple Theme - External URLs, Possible privilege escalation, Suspicious files vulnerabilities

HackApp vulnerability scanner discovered that application Little Couple Theme published at the 'play' market has multiple vulnerabilities...

MyDarling - Couple Application - Dangerous filesystem permissions, Runtime privilege escalation, WebView code execution vulnerabilities

HackApp vulnerability scanner discovered that application MyDarling - Couple Application published at the 'play' market has multiple vulnerabilities...

Information disclosure

The Loving - Couple Essential aka com.xiaoenai.app application 4.0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-5972

The Loving - Couple Essential (aka com.xiaoenai.app) for Android, version 4.0.1, fails to verify X.509 certificates from SSL servers, enabling man-in-the-middle access to sensitive data via a crafted certificate. Root cause is lack of certificate verification in the TLS handshake. Reported impact...