Research & Threat Intel
Artificial Intelligence (AI) is transforming technology, and mobile apps are no exception. Organizations across verticals and size are racing to embrace AI technologies to drive productivity, but surveys indicate many consumers remain suspicious of the technology. The security, reliability and privacy implications of AI experiences face a laundry list of questions: Risks Introduced by Generative […]
The brightest minds in reverse engineering, security research and mobile app security testing will convene in Barcelona next month to explore the latest advancements in Radare2 (r2). As proud contributors to the open-source community, NowSecure experts look forward to presenting groundbreaking talks on mobile security, Frida techniques and innovative ways to enhance r2 capabilities. About […]
Mobile apps have become indispensable to modern businesses, yet they present significant risks when not properly secured. NowSecure benchmark data indicates that 85% of apps found in public app stores have security flaws and 70% have the potential to leak personal data. NowSecure Mobile App Risk Intelligence (MARI) protects organizations by providing insight around pervasive […]
Welcome to the final blog post in our series about reverse engineering iOS system libraries with radare2. This time we’ll focus on finding cross-references across different libraries present in the dyld shared library cache (or DSC if you’re into acronyms). We’ll discuss various techniques to achieve this, each with its trade-offs between performance and amount […]
Editor’s Note: Keeping up with ever-changing low-level operating system internals is no small task, especially when it comes to the iOS dyld cache, a key element that underpins how iOS apps interact with the OS layer. This post, by Francesco Tamagni, focuses on leveraging foundational pieces of radare2 to read and interpret the formats critical […]
Frida, a popular open-source project, is a dynamic instrumentation toolkit that enables developers, security researchers and reverse engineers to inject custom scripts into running processes. It allows users to perform a variety of tasks such as function hooking, API call tracing and runtime manipulation, making it a versatile tool for debugging, reverse engineering and mobile […]
NowSecure benchmark mobile application security testing reveals a staggering 95% of mobile apps fail at least one OWASP MASVS category, putting organizations at significant risk of data breaches and leaks. The OWASP Mobile Application Security Verification Standard (MASVS) sets a minimum security and privacy bar for mobile security professionals and developers to follow when building […]
Whether you’re building a mobile app from scratch or evaluating an existing app, developers will find debugging an essential skill to master. Debugging is the process of identifying and resolving errors in software systems and mobile apps. Most Integrated Development Environments (IDE) come with built-in debugging tools that enable a developer to review the inner […]
The rise of generative Artificial Intelligence (AI)-based tools has the potential to revolutionize software development. Many organizations have already embraced AI-powered coding assistants such as GitHub Copilot and ChatGPT to improve the developer experience and speed time to market. A recent McKinsey study found devs can complete coding tasks up to twice as fast with […]
“Photo by FLO:D on Unpslash https://unsplash.com/photos/yQYQJaiypZE“ Technology advancements are constantly reshaping the way we communicate and conduct business. As the CTO of NowSecure, a mobile application security testing SaaS provider, I want to discuss a topic I believe is of timely relevance: post-quantum security and in particular within the mobile application context. The cryptographic landscape is […]