Amy Schurr
The U.S. Cybersecurity & Infrastructure Security Agency (CISA) and Office of Management and Budget (OMB) released a secure software development attestation form on March 11, 2024, in a long awaited followup to Executive Order (EO) 14028. EO 14028, “Improving the Nation’s Cybersecurity,” outlines the federal cybersecurity strategy to reduce software supply-chain risks. The OMB M-22-18 […]
Mobile penetration testing helps businesses defend against cyberattacks, safeguard data privacy and preserve brand reputation. Best practices call for continuous automated mobile application security testing throughout the software developement lifecycle to gain speed and efficiency. However, organizations should augment automation with manual mobile penetration testing for certain high-risk mobile apps to achieve the greatest coverage. […]
Organizations can expect mobile application security and mobile app privacy risks to intensify across Europe when the Digital Markets Act regulation takes effect in March. Users within Europe will be able to download mobile apps from outside the trusted mobile ecosystems of the Apple App Store and Google Play Store. While new third-party app stores […]
The Federal Trade Commission (FTC) has been aggressively cracking down on mobile app privacy violations to safeguard consumers’ personal information. Following the landmark California Consumer Privacy Act (CCPA), several states including Florida, Montana, Oregon, Texas and Washington enacted data privacy laws that take effect in 2024 and many others have pending privacy legislation. With privacy […]
NowSecure benchmark mobile application security testing reveals a staggering 95% of mobile apps fail at least one OWASP MASVS category, putting organizations at significant risk of data breaches and leaks. The OWASP Mobile Application Security Verification Standard (MASVS) sets a minimum security and privacy bar for mobile security professionals and developers to follow when building […]
In today’s digital landscape, safeguarding mobile apps has become paramount. Mobile app breaches pose significant threats to data security and privacy. In addition, they erode user trust in apps and their respective developers, which in turn impacts the installed base and revenue. Mobile application security testing can help organizations identify insecure coding practices, configuration errors […]