Frida noscript to perform static security analysis of an iOS app Source: https://github.com/interference-security/frida-noscripts/blob/master/iOS/ios-app-static-analysis.js Twitter: https://twitter.com...

Last year, the New York Times reported how a chat app gaining traction worldwide was actually being used as a spying tool. Google Play removes ToTok...

Android privilege escalation via an use-after-free in binder.c - DimitriFourny/cve-2019-2215

This blog post is about static analysis of Android App & due to insecure storage of SMS API credentials I was able to Takeover the SMS API.

In this article, I have covered most of the tools and techniques required for kickstarting your iOS applications pentesting.

Document management apps failing to encrypt files while transferring them between the user and the cloud-based application that provides the service.

Exclusive: KidsGuard siphoned off photos, videos, screenshots and call recordings to an unprotected server.

Posted by Per Bjorke, Senior Product Manager, Ad Traffic Quality As part of our ongoing efforts — along with help from newly developed tec...

Research by: Ohad Mana, Israel Wernik, Bogdan Melnykov, Aviran Hazum Intro Check Point researchers have recently discovered a new clicker malware family, along with fresh samples of the Joker malware family in Google Play. Throughout this publication we present…

Hello! This post is an analysis of a variation of the billing fraud Android malware known as Joker that, in this case, utilities a native component (a shared object file, think of it as a Windows D…

**Summary:** iOS app crashed by specially crafted direct message reactions

**Denoscription:**
Twitter does not properly sanitize direct message reactions, making it possible for arbitrary reaction...

Hello Twitter Team

#Summary
This issue is mainly in the Periscope Android app against CSRF follow action using deeplink.

#Denoscription
In normal Periscope Website, when we share a follow link like...

A flaw by WhatsApp is allowed hundreds of thousands of private group invite links to be indexed by search engines such as Google.