Best Practices
The global over-the-top (OTT) streaming market is projected to reach $343 billion in 2025, growing annually by 6.56%. Revenue from Advertising Video-on-Demand (AVoD) alone is expected to hit $54.54 billion, showcasing the substantial opportunities in this booming market. However, this rapid growth presents significant mobile app security and privacy challenges. As OTT apps handle vast […]
Every smartphone in the world today is a potential spy equipped with more than 18 sensors like GPS, accelerometer, gyroscope and microphone that can be weaponized by cyberattackers who take advantage of poorly secured mobile apps. With more than 7.2 billion smartphones in use and 255 billion app downloads in 2023 alone, the global mobile […]
Traditional penetration testing wasn’t built for today’s mobile release cycles. Annual, semi-annual or even quarterly pen tests don’t cut it anymore. If your mobile app updates weekly, that’s a dozen untested versions before your next scheduled assessment. That’s a dozen chances for a data leak or privacy flaw to slip through. Mobile Penetration Testing as […]
“Cybercriminals are increasingly logging in rather than hacking into networks through valid accounts.”— IBM Security X-Force Threat Index 2024 “The use of stolen credentials remains the primary way into organizations, with 40% of breaches involving credentials as the top ‘action’ to entry taken.”— Verizon 2024 Data Breach Investigations Report In popular imagination, hackers navigate complex […]
The Hidden Risks in Mobile SDKs Many app developers are unaware of the potential misuse of their platforms for unauthorized data collection, especially through advertising networks embedded in Software Development Kits (SDKs) in their app’s supply chain. These hidden risks can lead to: By integrating third-party SDKs without proper vetting, developers may unknowingly introduce vulnerabilities […]
Welcome to the final blog post in our series about reverse engineering iOS system libraries with radare2. This time we’ll focus on finding cross-references across different libraries present in the dyld shared library cache (or DSC if you’re into acronyms). We’ll discuss various techniques to achieve this, each with its trade-offs between performance and amount […]
Editor’s Note: Keeping up with ever-changing low-level operating system internals is no small task, especially when it comes to the iOS dyld cache, a key element that underpins how iOS apps interact with the OS layer. This post, by Francesco Tamagni, focuses on leveraging foundational pieces of radare2 to read and interpret the formats critical […]
New U.S. Securities and Exchange Commission (SEC) regulations for cybersecurity disclosures will reshape how companies report on risk management strategies and disclose and manage security incidents. Changes to the federal government agency’s reporting requirements took effect in December 2023. Experts expect the mandatory enhanced cybersecurity disclosures to compel companies to enhance proactive protection measures to […]
You have legal obligations to secure customer and enterprise data which includes your suppliers. What assurances do you have that they are secure? Businesses entrust their data to an ever-expanding number of suppliers, including technology and Software as a Service (SaaS) providers. The days when most companies strongly favored self-hosted solutions are gone, with the […]
Mobile health (mHealth) apps revolutionize healthcare delivery and transform patient outcomes. mHealth apps empower patients to better manage their health by providing personalized monitoring, tracking and therapeutic support, all from the convenience of their mobile apps. Buoyed by the COVID-19 pandemic and the rise of remote patient monitoring, there are now more than 350,000 health […]