Skip links

NowSecure

We deliver mobile app security testing, incident response, and compliance solutions.

Main navigation

Research & Threat Intel

Android Dirty COW patch and exploiting vulnerable devices without root

Android Dirty COW patch and exploiting vulnerable devices without root

Android Dirty COW patch released On Monday, Google announced putting the Dirty COW vulnerability (CVE-2016-5195) out to pasture with the 2016-12-05 patch level in the December 2016 Android Security Update. That’s welcome news for owners of Google Nexus and Pixel devices. Of course even with the patch from Google, the long standing problem of Android

Read Now >

Exploiting iOS WebViews to force automatic FaceTime calls

Call me maybe: Exploiting iOS WebViews to force automatic FaceTime calls

An attacker can exploit iOS WebViews to make automatic calls to an attacker-controlled phone number OR FaceTime address. Our research has found that FaceTime URL (facetime://) handlers are frequently overlooked in iOS applications. The oversight allows an attacker to potentially capture a video or snapshot of the affected user by directing them to a webpage from within a vulnerable WebView.

Read Now >