Best Practices
Highly regulated and strongly-branded organizations and organizationes that embrace industry standards should ensure that their mobile apps comply with the OWASP Mobile Application Security Verification Standard (MASVS) security requirements. To support these needs, NowSecure recently expanded its expert mobile application penetration tests to offer OWASP MASVS compliance and incorporated OWASP MASVS findings into NowSecure Platform […]
Healthcare mobile application developers now face heightened scrutiny over security and privacy vulnerabilities. The American Medical Association (AMA) recently encouraged companies that make mHealth apps and connected devices that collect health information to adopt privacy by design principles. And in 2022, all mHealth app makers must comply with the Federal Trade Commission’s Health Breach Notification […]
Mobile application security professionals following best practices for OWASP Mobile Application Security Testing now have a new resource to enhance their efficiency. As part of a series of updates to the OWASP MASVS and OWASP MASTG, the OWASP Mobile Application Security Project recently released a new fully automated version of its OWASP Mobile Application Security […]
Hurrying to meet an aggressive deadline, your mobile application development team will soon complete major updates to the company’s flagship Android and iOS applications. The project progresses smoothly until you discover that one major obstacle stands in the way of on-time release: nobody remembered to line up mobile penetration testing to validate mobile application security. […]
Escalating software supply-chain attacks pose a serious threat to the public sector and organizationes. Adversaries exploit vulnerabilities in third-party code to compromise a supplier to the vast digital ecosystem downstream. The ripple effect causes widespread disruption, financial loss and reputational damage and even endangers national security. Consider the enormous impact the SolarWinds software supply chain […]
Mobile app developers constantly face pressure to catch up with or leap ahead of the competition. Innovative mobile features certainly improve the user experience, but the accelerated pace of mobile app development often shortchanges security. DevSecOps teams can speed the delivery of high-quality mobile apps by performing continuous security testing throughout the software development lifecycle […]
Held over two days in mid-November, the NowSecure Connect 2021 virtual conference assembled hundreds of mobile application security and mobile DevSecOps directors and practitioners for industry insights, discussions, in-depth training and peer-to-peer interaction. Event registrants can watch NowSecure Connect 2021 sessions on demand for free. Attendees included C-level executives, directors, managers, architects, engineers, analysts, developers […]
Organizations face an ever-increasing volume of security and privacy risks associated with mobile applications. Challenges include ensuring mobile app security without slowing down developers, guarding against software supply chain risk and regulatory compliance violations, and upskilling security and dev teams with best practices for secure coding. Whether you seek to speed releases, improve quality, manage […]
Reverse engineering iOS mobile apps is no easy feat. Learn the basics of reverse engineering iOS binaries by utilizing some of the more popular tools provided by Apple along with some third-party tools.
Mobile application penetration testing provides organizations with the confidence and peace of mind that the mobile apps it develops meet industry standards for security, privacy and compliance. In some industries such as finance or healthcare, organizationes must conduct pen tests to comply with regulatory requirements. Others opt for iOS and Android application penetration testing when […]