When news of the Android master-key vulnerability began leaking out in early July, details were hard to come by, and that was done intentionally. The researchers at Blue Box Security, a mobile-security start-up, had discovered the vulnerability and were planning to disclose the details of the bug in a presentation at the Black Hat USA 2013 conference.
Apple claims it will fix a previous disclosed flaw in its mobile operating system that can allow hackers complete access to an iPhone or iPad via a fake USB charger.
Las Vegas – In the last Black Hat briefing of the day Wednesday, German security researcher Karsten Nohl of Security Research Labs demonstrated a SIM card attack that exploited sloppy encryption and gave the researcher root access to a type of SIM card built into billions of mobile devices.
The new BlackBerry 10 operating system contains a number of security improvements and upgrades over earlier versions, but there are still some features and functions that an attacker may be able to exploit.
As many as 750 million mobile phones could be vulnerable to an encryption flaw on some types of SIM cards, a German cryptographer and researcher warned over the weekend.
BlackBerry refutes the claims of a German researcher who said BlackBerry 10 devices transmit private email credentials in the clear, and that they’re stored by BlackBerry.
A Google Glass feature that gives the device the ability to automatically read text also leaves it vulnerable to malicious wireless networks, according to Lookout mobile security research.
Tumblr patched its iOS app yesterday, fixing a password sniffing bug that attackers may have been using to steal users’ logins and passwords.
A new app called ReKey fixes the Android master key vulnerability, released by Duo Security.
Chinese researchers have published a second Android Master Key attack, leveraging the same vulnerability that allows attackers to modify signed apps with malware.
Infosec Insider content is written by a trusted community of Threatpost cybersecurity subject matter experts. Each contribution has a goal of bringing a unique voice to important cybersecurity topics. Content strives to be of the highest quality, objective and non-commercial.
Sponsored Content is paid for by an advertiser. Sponsored content is written and edited by members of our sponsor community. This content creates an opportunity for a sponsor to provide insight and commentary from their point-of-view directly to the Threatpost audience. The Threatpost editorial team does not participate in the writing or editing of Sponsored Content.
