Jul 12

8 Reasons Mobile Apps Access Location + Security Policies to Consider

A fitness app, called Polar Flow, was recently found to be exposing the name, profile picture and whereabouts of high-ranking military personnel by oversharing user location data. Unfortunately, this is not the only  security incident leaking user location. Back in February, Appthority noted how students had been able to piece together data on US military […]

Read full article >

Sep 10

MITRE Adds Appthority as CVE Numbering Authority (CNA)

On Sep 7, 2018, MITRE announced that Appthority has joined 89 other organizations as a CVE Numbering Authority (CNA). Appthority is the first CNA that is focused on enterprise mobile threat research, and we’re proud of this designation. We look forward to participating in and supporting the CVE project and ecosystem for the benefit of […]

Read full article >

Sep 05

Android Security Update – September 2018

On September 4, 2018 Google released an Android Security Bulletin containing details of security vulnerabilities affecting Android devices. Android security updates normally include two parts: general updates that affect most users and the updates affecting specific partners, such as hardware partners like NVIDIA, Broadcom and Qualcomm. Here we’ve summarized the general security updates on the […]

Read full article >

Aug 27

Enterprise Security Risk: Apps Capturing Corporate Mobile Screens

A recent advancement in crash reporting SDKs enables developers to record in-app screens, so that they know the exact state of an app before it crashes. This opens up doors for new exploits in enterprise mobile environments, as third-parties are increasingly recording mobile screens for debugging purpose and sending them back to external servers. Poor […]

Read full article >