A new study from North Carolina State University has confirmed that when Android phone manufacturers customize devices with special preloaded software, apps and code it has a direct affect on the security of each device.
Kaspersky Lab researchers say the Android banking Trojann Svpeng now has phishing capabilities and may be testing the waters to infect devices outside of Russia.
Mozilla released Firefox 25 yesterday, fixing 10 vulnerabilities, five of them critical.
Attackers can exploit a caching weakness in mobile applications by forcing a permanent HTTP 301 redirection that will persistently serve a hacker’s content to a mobile app.
A researcher has discovered serious vulnerabilities in the main Facebook and Facebook Messenger apps for Android that enable any other app on a device to access the user’s Facebook access token and take over her account. The same researcher also discovered a separate, similar flaw in the Facebook Pages Manager for Android, an app that […]
An Android ad library containing a maliciously potent cocktail of features and vulnerabilities is less of a danger to Android users today after Google and the ad network itself made a series of changes.
Researchers are going to present an update to the Snoopy Project, a distributed mobile tracking and intelligence platform at Black Hat Brazil and ZeroNights Russia.
Blackberry added to Patch Tuesday’s patches with an update for its BlackBerry Enterprise Service 10 mobile device management product, fixing a remote code execution vulnerability.
An unnamed Android ad library can be abused to collect not only device data, but user activity on an Android device.
Privat24, the mobile banking application for Ukraine’s largest commercial bank, contains an insufficient validation vulnerability in its iOS, Android, and Windows phone apps that could give an attacker the ability to steal money from user accounts after bypassing its two-factor authentication protection.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
