Research & Threat Intel
Introduction Update (2025): The security issues identified in the XTool AnyScan mobile application have now been assigned official CVEs: CVE-2025-63432, CVE-2025-63433, CVE-2025-63434, and CVE-2025-63435. These CVEs formalize and validate the vulnerabilities discovered by the NowSecure research team, underscoring the seriousness of the remote code execution (RCE) risks posed to mobile devices and connected vehicles. NowSecure […]
iVerify recently published a detailed technical analysis uncovering a new iMessage vulnerability — dubbed “NICKNAME” — that could be used in a zero-click attack to compromise iOS devices. The exploit abuses the way iOS handles iMessage contact profile updates (nicknames) to trigger memory corruption and potentially deliver spyware without any user interaction. What We Know […]
App Store and Google Play visitors find it hard to escape Artificial Intelligence (AI). From photo enhancement apps to voice assistants to health diagnostics, AI commands an undeniable presence in mobile apps. In fact, 10 out of 12 top graphic design apps use AI — it’s everywhere. As AI permeates mobile apps, it introduces a […]
A NowSecure mobile application security and privacy assessment has uncovered multiple security and privacy issues in the DeepSeek iOS mobile app that lead us to urge enterprises to prohibit/forbid its usage in their organizations. As the top iOS app since Jan 25, 2025, the DeepSeek iOS app has already been downloaded and used on millions […]
At NowSecure, we continually explore innovative ways to analyze mobile apps without requiring access to their source code. As mobile app development changes quickly with new languages, frameworks and technologies, reverse engineering tools often struggle to keep pace. Artificial intelligence (AI) language models are emerging as valuable tools for mobile security analysts and developers, offering […]
Mobile apps may run the business, but they also face threats that can destroy it. Mobile application security and privacy breaches can disrupt operations, cause theft and fraud, endanger the personal safety of employees and result in regulatory non-compliance. The good news is CISOs can neutralize many of these threats by implementing a strong mobile […]
What risks lurk in your mobile app ecosystem? Mobile apps play a vital role in customer engagement and business operations, but they also bring unique security and privacy risks. Unlike traditional desktop applications, mobile apps run on diverse devices and operating systems, increasing their exposure to vulnerabilities. Mobile app risks can range from insecure data […]
Artificial Intelligence (AI) is transforming technology, and mobile apps are no exception. Organizations across verticals and size are racing to embrace AI technologies to drive productivity, but surveys indicate many consumers remain suspicious of the technology. The security, reliability and privacy implications of AI experiences face a laundry list of questions: Risks Introduced by Generative […]
The brightest minds in reverse engineering, security research and mobile app security testing will convene in Barcelona next month to explore the latest advancements in Radare2 (r2). As proud contributors to the open-source community, NowSecure experts look forward to presenting groundbreaking talks on mobile security, Frida techniques and innovative ways to enhance r2 capabilities. About […]
Mobile apps have become indispensable to modern businesses, yet they present significant risks when not properly secured. NowSecure benchmark data indicates that 85% of apps found in public app stores have security flaws and 70% have the potential to leak personal data. NowSecure Mobile App Risk Intelligence (MARI) protects organizations by providing insight around pervasive […]