Threatpost

 

Skip to Navigation 

 

http://threatpost.com/en_us/category/topics/mobile-security

Sunday, January 13th, 2013

Leave this field blank:

EN US Navigation Bar

• Apple
• Cloud
• Compliance
• Critical Infrastructure
• Cryptography
• Government
• Hacks
• Malware
• Microsoft
• Mobile Security
• Privacy
• SMB
• Social Engineering
• Virtualization
• Vulnerabilities
• Web Security

Home ›

Mobile Security

January 10, 2013, 1:52PM

California Attorney General Fighting for Mobile Privacy Rights

• Add new comment
• Comment

by Brian Donohue

UPDATE - In an attempt to reign in the tendency of indifference toward consumer privacy among mobile application developers, California Attorney General Kamala D. Harris today made public a list of guidelines regulating the ways in which mobile application developers and technology companies handle user data and educate users about what they intend on doing with that data. Read more »

January 9, 2013, 3:30PM

Researcher: Nokia HTTPs Traffic Proxied, Data Stored in Clear Text

• 2 comments
• 2 Comments

by Michael Mimoso

Nokia mobile devices redirect Web requests to Nokia-owned proxy servers where header information including credentials are stored in clear text, putting anything from banking sessions to social media accounts at risk, a researcher claims. Read more »

January 4, 2013, 12:56PM

Samsung Pushes Exynos Flaw Fix on Galaxy Phones

• 4 comments
• 4 Comments

by Christopher Brook

Samsung has started to push software updates to some users of its Galaxy branded phones this week, fixing a flaw that was found affecting devices containing Exynos processors shortly before Christmas. Read more »

December 20, 2012, 11:48AM

Samsung Acknowledges Exynos Root Exploit

• Add new comment
• Comment

by Brian Donohue

Samsung downplayed a root exploit vulnerability in some of its Exynos processors, and promised a patch for the flaw, according to a company statement acquired by AndroidCentral. Read more »

December 18, 2012, 1:56PM

Android Trojan Apps Build SMS Botnet

• Add new comment
• Comment

by Brian Donohue

A rudimentary, SMS-based botnet is ensnaring Android users into its web with a series of text messages offering free downloads for popular, paid gaming applications, according to Cloudmark researcher Andrew Conway. Read more »

December 12, 2012, 10:50AM

SMS Extortion Trojan Targeting Apple Machines

• 9 comments
• 9 Comments

by Brian Donohue

In yet another blow to the tenuous false sense of security among Apple users, the Russian antivirus firm Dr. Web has uncovered what it claims is a first-of-its-kind fake installer Trojan targeting Mac machines and extorting their users with SMS fraud. Read more »

December 10, 2012, 10:38PM

FTC Launches Investigations into Mobile Apps for Kids

• Add new comment
• Comment

by Anne Saita

The Federal Trade Commission on Monday said it's launching "non-public investigations" to determine if mobile application providers are violating federal laws by collecting information on children without their parents' permission.

A report indicates almost 60 percent (235) of the children-centric mobile apps the agency reviewed from Google and Apple app stores collected device IDs and other private data often shared with an advertising network, analytics company or other third party. More than half also displayed advertising, such as one children's app that showed an advertisement for an adult singles club. Only 20 percent disclosed their privacy policy. Read more »

December 10, 2012, 2:44PM

Low Detection Rates Mar Google Android Application Verification Service

• 1 comment
• 1 Comment

by Michael Mimoso

Google’s brand new application verification service for Android, released in JellyBean 4.2, fails to measure up to its commercial counterparts, according to researchers from North Carolina State University.

The new service determines whether applications installed on Android devices are malicious, yet in comparisons with 10 leading antivirus engines, and even Google’s newly acquired VirusTotal scanner, the new service detects at best 20 percent of Android malware. Read more »

December 6, 2012, 1:20PM

Google Launches Private Android App Stores

• Add new comment
• Comment

by Dennis Fisher

Malicious apps have emerged as perhaps the most serious threat to mobile devices at the moment, and the major players, such as Apple and Google, have tried several different methods of preventing them from getting into their app stores and into the hands of users. Now, Google is taking one more step with the launch of a new service called the Private Channel for Google Apps, which gives enterprises and other organizations the ability to create private app stores and control the apps their users can download. Read more »

December 4, 2012, 10:13PM

Twitter Resolves SMS Bug (For Some Users)

• Add new comment
• Comment

by Anne Saita

UPDATE--A day after an independant security researcher disclosed a vulnerability in SMS-enabled Twitter accounts, the social network giant announced it's fixed the flaw - at least for some users. Those who use a "long code" and/or cannot use a PIN code remain at risk. Read more »

• 1
• 2
• 3
• 4
• 5
• 6
• 7
• 8
• 9
• …
• next ›
• last »

Today's Most Popular

• Most Viewed

• Alleged ZeuS Botmaster Arrested for Stealing $100 Million from U.S. Banks
• Nasty New Java Zero Day Found; Exploit Kits Already Have It
• Shodan Search Engine Project Enumerates Internet-Facing Critical Infrastructure Devices
• Incomplete Java Patch Paved Way for Latest Zero Day Mess
• Yahoo Mail XSS Vulnerability Could Affect Millions of Accounts

Most Commented Stories

• Judge Rules Against Texas Teen Who Refused to Wear SmartID Badge (12)
• Nasty New Java Zero Day Found; Exploit Kits Already Have It (11)
• Shodan Search Engine Project Enumerates Internet-Facing Critical Infrastructure Devices (5)
• Samsung Smart TV Bug Allows Remote Access, Root Privileges (4)
• Alleged ZeuS Botmaster Arrested for Stealing $100 Million from U.S. Banks (1)

Listen to Latest Podcasts

• Gary McGraw on Cyberwar and the Folly of Hoarding Cyber-Rocks
   
• Dan Guido on the THREADS Mobile Security Conference
   
• Chris Soghoian on Exploit Sales
   

Follow Threatpost

LinkedIn	Twitter	Tumblr	Facebook

 

 

 

Apple | Cloud | Compliance | Critical Infrastructure | Cryptography | Government | Hacks | Malware | Microsoft | Mobile Security | SMB | Social Engineering | Virtualization | Vulnerabilities | Web Security

Dennis Fisher | Michael Mimoso | Christopher Brook | Brian Donohue | Anne Saita | Guest Posts | Around the Web | Videos  | Slideshows | Podcasts 

Newsletter Sign-up | Widgets | RSS Feeds | Home | About Us | Contact Us | Linking Policy

 

Copyright © 2012 threatpost.com | Terms of Service | Privacy

转载于:https://www.cnblogs.com/xun99/archive/2013/01/13/2858646.html