Best Practices
NowSecure’s 2026 Mobile App Risk Management Survey found that 68% of organizations report having more than half their mobile codebase built from third-party SDKs. For most teams, the majority of what ships in their app is code they didn’t write, and mobile app security testing hasn’t caught up to that shift. Assessment practices haven’t kept […]
Cybersecurity Awareness Month usually brings a familiar set of reminders: strengthen passwords, turn on multifactor authentication, update software and watch for phishing. Each helps. None goes far enough for organizations whose customers, employees and revenue increasingly depend on mobile applications. The mobile security conversation changed materially in 2026. Enterprise mobile portfolios already include AI. Apple’s […]
OWASP’s MASWE v1 and MASTG v2 give mobile app security teams more consistent ways to describe weaknesses and test Android and iOS apps. In a recent webinar, NowSecure Distinguished Research Engineer and OWASP MAS project co-chair Carlos Holguera walked through the updates with OWASP Foundation Director of Open Source Projects and Programs Starr Brown. Here’s […]
If your team manages Apple devices, AI governance has likely become part of the job. Jamf admins are developing policies for the AI tools and agents appearing on managed endpoints, and Jamf Nation User Conference (JNUC) 2026 reflects that shift with sessions on agentic administration, AI operations and automated workflows. NowSecure will join the conversation […]
Before NowSecure fielded its 2026 Mobile App Risk Management (MARM) Survey, we ran an experiment most survey research skips. We asked three leading AI models, Claude Sonnet, ChatGPT and Gemini, to predict how senior mobile application security leaders would answer the survey. Then we compared those predictions with the survey responses. We weren’t asking AI […]
Apple is changing how AI interacts with mobile apps. Siri AI can now discover application functionality, invoke actions and orchestrate workflows across apps. Here’s what that means for mobile application security and what AppSec teams should do before these capabilities reach production. Apple has done something most security teams haven’t fully clocked yet. With iOS […]
What Happened at OWASP MAScon Vienna? The inaugural OWASP MAScon in Vienna, Austria, demonstrated what many in the mobile application security community already suspected: demand for a dedicated, deeply technical mobile AppSec conference is strong. Held as part of OWASP Global AppSec EU 2026 at the Austria Center Vienna, MAScon brought together mobile security researchers, […]
MASTG v2.0 gives CISOs, auditors and regulators a measurable, evidence-based answer to mobile app risk. The OWASP Foundation released on June 30th the Mobile Application Security Testing Guide (MASTG) v2.0, marking a fundamental shift in how mobile security is defined and executed. This milestone release concludes a three-year, community-driven effort to transform the Mobile Application […]
Most vulnerability management programs are built on a simple assumption: vulnerabilities are discovered, assigned a CVE, analyzed, prioritized and remediated. A new federal audit suggests that model is under increasing strain. The National Vulnerability Database (NVD) backlog isn’t just a government process issue; it’s evidence that vulnerability volume, software supply-chain complexity and shrinking exploitation timelines […]
Why Line of Business and the CISO can finally be on the same team. AI is rapidly transforming how mobile applications are built. One emerging approach, often referred to as vibe coding — AI-assisted generation of mobile applications using natural language prompts — is enabling teams to create apps faster than ever before. But speed […]