8 Best Android Apps To Improve Privacy and Security

Just to have a good anti-virus protection app in your smartphone doesn’t mean a complete Security. As Mobile Device Security is comprised of security of different features, such as: Data privacy and security features Permission restrictions for snoopy apps A blacklist for undesired calls An...

Coinbase: ByPassing the email Validation Email on Sign up process in mobile apps

Hi, According to the design When the new user sign up using mobile appsandroid,ios.It will ask for the confirmation of the email.It will send a confirmation mail to mail id and a screen will also appear in the mobile app. The user needs to open the email in the device then the screen will Off and...

Watch the video to understand Web application security vulnerabilities TOP 10 IBM internal Video-the vulnerability warning-the black bar safety net

! Accompanied by more and more application development, Web also seems to carry more features, such as the Google Office Suite, Google Docs, a calculator, e-mail, storage space, maps, weather and news, etc... And all this is based on meeting our life's daily needs. Now, we The phone if you can no...

WordPress Mobile Pack 1.0.8223 - 2.0.1 Password Protected Post Disclosure

The WordPress Mobile Pack – Mobile Plugin for Progressive Web Apps & Hybrid Mobile Apps WordPress plugin was affected by a 2.0.1 Password Protected Post Disclosure security vulnerability...

Health and Fitness Apps Poor at Protecting Privacy FTC Says

A recent study conducted by the Federal Trade Commission examined 12 mobile health and fitness apps and found them sending users’ personal information to 76 different third parties. Jah-Juin Ho, an attorney in the FTC’s Mobile Technology Unit shared the research yesterday during a seminar regardi...

New NIST AppVet Aims to Streamline Application Security

Apple and Google put developers’ apps through a relatively vigorous screening process before they make their way into their respective app stores. Now developers who produce apps intended for use on internal networks at government agencies can get a vetting process of their own. The National...

Researchers explained How ANGRY BIRDS Sharing Your Personal Data

We are already aware about the fact that most probably every mobile app is collecting our data in one or the other form. Thanks to Edward Snowden, who provided the secret documents that revealed that the world's most popular Smartphone applications, including gaming apps such as Angry Birds, are...

FTC Settles With Fandango, Credit Karma Over SSL Issues in Mobile Apps

The makers of two major mobile apps, Fandango and Credit Karma, have settled with the Federal Trade Commission after the commission charged that they deliberately misrepresented the security of their apps and failed to validate SSL certificates. The apps promised users that their data was being...

Angry Birds and other Mobile Gaming apps leaking your private information to NSA

Are you fond of playing games on your Smartphone like Angry Birds or Subway Surfer?? You should now stop wasting your time, because NSA is utilizing your gaming energy in the best possible way. According to the latest documents leaked by former U.S. Government contractor Edward Snowden, Some of t...

HTTP Request Hijacking Attacks Threaten Mobile Apps

Thousands of mobile apps developed for the Apple iOS platform can be forced to display phony, even malicious content, because of a vulnerability that allows an attacker to redirect traffic to a third-party site and persistently serve content from that location. Researchers from Israeli mobile...

Adaudit Plus Online Demo CSRF / Poor Password Passing

================================================================================================================================================= ADAUDIT PLUS ON-LINE DEMO TomCat Directory Listing / CSRF / Password field Submited using GET Method / OPTIONS Method...

Android malware loaded with Linux kernel privilege escalation exploit

Malware authors are notorious for quickly leveraging new exploits in the public domain for nefarious purposes. A recently discovered Linux kernel Local privilege escalation exploit, which allows attackers to gain complete control of infected devices, has been ported to the Android smartphone...

Twitter OAuth API Keys Leaked

The OAuth keys and secrets that official Twitter applications use to access users’ Twitter accounts have been leaked in a post to Github this morning. The consumer keys and secrets, which function similarly to a username and password, were posted for Twitter for iPhone, Android, iPad, Mac, Window...

FTC Launches Investigations into Mobile Apps for Kids

The Federal Trade Commission on Monday said it’s launching “non-public investigations” to determine if mobile application providers are violating federal laws by collecting information on children without their parents’ permission. A report indicates almost 60 percent 235 of the children-centric...

Yandex.ru платит за уязвимости

Привет. Яндекс опять. Цитата: Конкурс «Охота за ошибками» Яндекс выплачивает награды за обнаруженные проблемы в безопасности своих сервисов. Любой желающий может попытаться найти уязвимость, сообщить нам об этом и получить денежный приз. Где искать На веб-сервисах, а также в мобильных приложениях...

Boonex Dolphin v7.0.9 CMS & Mobile App - Multiple Web Vulnerabilities

Title: ====== Boonex Dolphin v7.0.9 CMS - Multiple Web Vulnerabilities Date: ===== 2012-05-18 References: =========== http://www.vulnerability-lab.com/getcontent.php?id=565 http://www.vulnerability-lab.com/getcontent.php?id=566 ID: Changeset 16256 VL-ID: ===== 565 Common Vulnerability Scoring...

Apple, Google and Others Agree to Provide Privacy Policy Option for Mobile Developers

This has turned out to be an interesting week for privacy. Just a few days after the White House laid out is privacy agenda, the California attorney general has announced an agreement with several major mobile platform providers, including Apple and Google, that will have the companies provide...

ESA-2011-036: RSA, The Security Division of EMC, announces the release of a Security Fix for RSA(r) Adaptive Authentication (On-Premise)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ESA-2011-036: RSA, The Security Division of EMC, announces the release of a Security Fix for RSA® Adaptive Authentication On-Premise Advisories Updated December 6, 2011 Summary: An issue with RSA® Adaptive Authentication On-Premise was discovered whic...

Design/Logic Flaw

EMC RSA Adaptive Authentication On-Premise AAOP 6.0.2.1 SP1 Patch 2, SP1 Patch 3, SP2, SP2 Patch 1, and SP3 does not properly perform forensic evaluation upon receipt of device tokens from mobile apps, which might allow remote attackers to bypass intended application restrictions via a mobile...

PT-2011-4054

Name of the Vulnerable Software and Affected Versions EMC RSA Adaptive Authentication On-Premise AAOP versions 6.0.2.1 SP1 Patch 2 through 6.0.2.1 SP3 Description The issue is related to the improper performance of forensic evaluation upon receipt of device tokens from mobile apps. This might all...