Preparing for the Unpredictable: Security in a New World of Mobile Malware

Mobile malware is nothing new. But in recent months, attackers have been getting more creative and resourceful with how they conceal, distribute and deploy these threats.

The post Preparing for the Unpredictable: Security in a New World of Mobile Malware appeared first on Security Intelligence.

Continue reading Preparing for the Unpredictable: Security in a New World of Mobile Malware

The ‘permission’ question is much different for iOS and Android apps, researchers say

It’s 2019, and digital scammers are going mobile. Do you know what your permissions allow? An analysis of 30,000 iOS applications released Wednesday by Wandera shows that social networking, weather, and e-commerce apps request access to lots of valuable information about users. Sixty-two percent of the iOS apps examined sought permission to a user’s photo library, while 55 percent requested camera access and 51 percent wanted to know a mobile user’s location. While app developers said they sought user permissions for a number of reasons — typically for functionality or for marketing purposes — Wandera’s research demonstrates the different risks mobile-device users can be up against, depending on what’s in their pocket. While hackers may exploit Androids to steal financial information or mine for cryptocurrency, iOS apps may abuse user trust for reasons that are less clear-cut. The London-based company’s previous research found that most Android apps asked for permission to connect to technical functions, […]

The post The ‘permission’ question is much different for iOS and Android apps, researchers say appeared first on CyberScoop.

Continue reading The ‘permission’ question is much different for iOS and Android apps, researchers say

Hey Siri, Get My Coffee, Hold the Malware

According to IBM X-Force IRIS research, there are several security concerns that should be taken into consideration before using Siri Shortcuts.

The post Hey Siri, Get My Coffee, Hold the Malware appeared first on Security Intelligence.

Continue reading Hey Siri, Get My Coffee, Hold the Malware

Equifax, others must secure apps as part of New York settlement

The New York attorney general’s office said five apps made by well-known companies could have leaked user data. The firms – Western Union, Priceline, Equifax, Spark Networks and Credit Sesame – have agreed to revamp the security of their apps as part of a settlement announced Friday. The state office said the companies failed to use the proper protocols to secure user information that is transmitted over the internet, despite assuring users about the security of the apps in question. “Businesses that make security promises to their users – especially as it relates to personal information – have a duty to keep those promises,” said Barbara Underwood, the New York attorney general, in a statement. The AG’s office said that the apps at had a “well-known security vulnerability” that could enable man-in-the-middle attacks, whereby a hacker can intercept data when it’s sent via a wireless connection. The office explained that apps that fail […]

The post Equifax, others must secure apps as part of New York settlement appeared first on CyberScoop.

Continue reading Equifax, others must secure apps as part of New York settlement

Major Application Security Oversights You Can’t Afford

Many IT teams have developed a habit of treating application security as an afterthought. As a result, it might be their greatest vulnerability.

The post Major Application Security Oversights You Can’t Afford appeared first on Security Intelligence.

Continue reading Major Application Security Oversights You Can’t Afford

Fortnite: When Dollars and Cents Trumps Security!

When Epic Games recently announced and subsequently released Fortnite for Android, it took the decision to bypass the Play Store and ask users to side-load the app. After I read that Epic Games’ brilliant idea was to ask Android users to essentia… Continue reading Fortnite: When Dollars and Cents Trumps Security!

Venmo users: time to hide your drug deals and excessive pizza consumption

To its fans, Venmo is a hassle-free P2P app that lets anyone living in the US send money to friends, split a restaurant bill, pay for a ride on Uber, or buy a hotel room. To the security conscious, it’s a privacy nightmare. Continue reading Venmo users: time to hide your drug deals and excessive pizza consumption