Industry News
A keen focus on technology has helped fast casual company Sweetgreen expand across the nation. The company has plans to create a ‘food platform’ or integrated food system from supply chain all the way to delivery. Sweetgreen is but one example of mobile digital transformation that dramatically changes the way that companies interact with their customers, employees and partners. And attackers have taken notice of mobile.
Recent enhancements to the Frida open-source dynamic instrumentation toolkit greatly ease the process of conducting jailed testing. You no longer have to manually package the Frida Gadget in your target app. As long as the app is debuggable, Frida does that for you. This post will walk you through the process of using Frida on a jailed device.
What will 2020 hold for mobile application security? NowSecure predicts we’ll see an intensified focus on privacy, mobile DevSecOps gaining traction and ample activity around wearables and Internet of Things (IoT). Here are some of the mobile appsec trends and challenges that our experts anticipate we’ll see in 2020.
IDC estimates that by the end of 2019, organizations worldwide will have spent more than $1 trillion on digital transformation initiatives. But organizations struggle to develop apps fast enough to satisfy organization demand and security often falls by the wayside. Learn how mobile DevSecOps can support digital transformation by enabling companies to swiftly develop apps without compromising security.
While corporations widely recognize the convenience and productivity enhancements that mobile applications deliver to their customers and employees, too few realize that mobile apps also can present significant security and privacy risks. It’s not difficult to find examples of mobile app data breaches that resulted in severe consequences, both in terms of money and corporate reputation. Given that smartphone apps account for 63% of total digital minutes, according to the Comscore “2019 Global State of Mobile” report, it stands to reason that attackers are going where the traffic is.
NowSecure enables organizations to leverage Microsoft tools such as Azure DevOps, Visual Studio, Visual Studio App Center and GitHub to ship software faster. Over the years, NowSecure has helped organizations automate security and privacy testing of mobile apps in their DevOps continuous delivery toolchains. We’re pleased to announce the availability of a new pre-built connector for Azure DevOps and Azure Pipeline CI/CD tools — the NowSecure Extension for Microsoft Azure DevOps. Devs can find the Azure DevOps extension in the Microsoft Visual Studio Marketplace. Formerly known as Visual Studio Team Services, Microsoft Azure DevOps provides developers with a suite of integrated tools.
To improve the guest experience and keep pace with competition, hotels worldwide are deploying digital key technology that allows guests to skip the front desk and use their mobile apps to remotely check in and go directly into their rooms without needing key cards. However, hotel mobile apps have vulnerabilities that can be exploited, as researchers demonstrated at the Black Hat USA 2019 conference.
Let’s say a mobile app pen test costs $5,000 in house or $15,000 to $25,000 to outsource. Did you know that an automated mobile app security testing tool costs $10,000 per app per year and can be used for unlimited testing of each and every build? For at least 30% less than the cost of a single penetration test, organizations can employ an automated testing platform that lets them test every build of a mobile app, every day of the year.
NowSecure team looks forward to sponsoring the DevOps Enterprise Summit (DOES) 2019 conference in Las Vegas from Oct. 28 – 30. The event brings together leaders of large, complex organizations deploying DevOps principles and practices for immersive learning. Pencil these suggested sessions into your agenda and stop by Booth 611 to share your “False Positives Suck” story with us to snag a sticker.
NFL teams have redesigned their mobile apps to enhance the fan experience, both in stadiums and at home. Fans can turn to their smartphones for digital ticketing, live video streaming, in-seat concession ordering, contest participation and cutting-edge features like augmented reality. However, a NowSecure analysis shows most of these apps have privacy risks, especially on iOS.