Hello again, and happy #MobSec5 Friday!
This week’s digest of mobile security news that matters includes:
- Apple released a fix for the text bomb bug
- First Android Go phones to be announced next week at Mobile World Congress
- Verizon’s Mobile Security Index finds that 32% of organizations sacrificed mobile security for business reasons
Thanks for reading. Have a great weekend, be good, and stay safe.
Subscribe now to receive #MobSec5 updates each Friday in your inbox.
About the security content of iOS 11.2.6
“This document describes the security content of iOS 11.2.6.”
Android P will Prevent Background Apps from Accessing the Camera
“Android P, the next major version of Android, will impose limits on idling background apps that request camera access. This is a boon for privacy as it means apps can’t take pictures of you without you knowing!”
“The carrier’s 2018 Mobile Security Index found that although 93 percent of survey respondents said mobile devices presented serious security threats, just 14 percent of their organizations implemented ‘the most basic cybersecurity practices.'”
In Verizon’s 2018 Mobile Security Index, respondents note that mobile security threats are on the rise, yet 83% agree that organizations are still complacent about mobile security. While most respondents (72%) rated malware as the top threat to cause a security incident, “43% said that ‘weaknesses in custom apps’ is on their radar. Interestingly, a high proportion (61%) of those had actually experienced a security incident caused by an app weakness.” As investments in mobile security measures increase this year, we invite you to take a look at a layered defense strategy. There is no silver bullet – no single tool will create an impenetrable defense. However, app weaknesses are a formidable threat to both your employees and your customers. Only fast, accurate mobile app security testing can help you remediate any app weaknesses and protect the trust your business and your customers have placed in your security team.
“According to IBM’s ‘Future of Identity Study,’ consumers are beginning to prioritize security over convenience, making trust a crucial competitive advantage for financial institutions.”
GDPR is coming, and many organizations aren’t ready
“Many firms still need to deploy security controls and implement solid incident response plans to meet the GDPR deadline in May.”
“Google’s new Google Pay app is here, combining all the company’s payment services like Android Pay and Google Wallet into one unified place across all Google devices.”
“The first Android Go phones will be announced at Mobile World Congress. Android Go is a slimmed-down version of Android that is meant for budget phones with low-end specifications.”
The Car of the Future Will Sell Your Data
“As smarter vehicles become troves of personal information, get ready for coupon offers at the next stoplight.”
“The number of users hacked represents just a fraction of Snapchat’s 187 million users.”
Don’t Trust Google Play Protect to Shield Your Android
“Google Play Protect bears the dubious honor of being the only Android program evaluated by AV-Test that doesn’t routinely protect its users.”
Internet of Babies – When baby monitors fail to be smart
“Baby monitors serve an important purpose in securing and monitoring our loved ones. An estimated 52k user accounts and video baby monitors are affected by a number of critical security vulnerabilities which raise serious security and privacy concerns.”
If you want to receive #MobSec5 updates each Friday in your inbox, subscribe now.