#appsecurity — Public Fediverse posts

FYI: DoubleVerify finds dozens of Android apps a month showing ads after calls: Apps abuse Android's Display over other apps permission to fire ads when a call ends, then vanish from the recents list. Can pre-install scans catch them all? https://ppc.land/doubleverify-finds-dozens-of-android-apps-a-month-showing-ads-after-calls/ #AndroidApps #MobileAdvertising #AdFraud #PrivacyProtection #AppSecurity

FYI: DoubleVerify finds dozens of Android apps a month showing ads after calls: Apps abuse Android's Display over other apps permission to fire ads when a call ends, then vanish from the recents list. Can pre-install scans catch them all? https://ppc.land/doubleverify-finds-dozens-of-android-apps-a-month-showing-ads-after-calls/ #AndroidApps #MobileAdvertising #AdFraud #PrivacyProtection #AppSecurity

FYI: Samsung bans proxy SDKs as a quarter of Tizen apps route strangers' traffic: Mnemonic found Bright Data code inside an Editor's Choice Pac-Man game, and 42% of LG apps carry similar SDKs. CTV buyers now face a new invalid-traffic vector. https://ppc.land/samsung-bans-proxy-sdks-as-a-quarter-of-tizen-apps-route-strangers-traffic/ #Samsung #Tizen #ProxySDKs #AppSecurity #InvalidTraffic

FYI: Samsung bans proxy SDKs as a quarter of Tizen apps route strangers' traffic: Mnemonic found Bright Data code inside an Editor's Choice Pac-Man game, and 42% of LG apps carry similar SDKs. CTV buyers now face a new invalid-traffic vector. https://ppc.land/samsung-bans-proxy-sdks-as-a-quarter-of-tizen-apps-route-strangers-traffic/ #Samsung #Tizen #ProxySDKs #AppSecurity #InvalidTraffic

ICYMI: DoubleVerify finds dozens of Android apps a month showing ads after calls: Apps abuse Android's Display over other apps permission to fire ads when a call ends, then vanish from the recents list. Can pre-install scans catch them all? https://ppc.land/doubleverify-finds-dozens-of-android-apps-a-month-showing-ads-after-calls/ #Android #MobileAds #AppSecurity #AdFraud #CyberSecurity

ICYMI: DoubleVerify finds dozens of Android apps a month showing ads after calls: Apps abuse Android's Display over other apps permission to fire ads when a call ends, then vanish from the recents list. Can pre-install scans catch them all? https://ppc.land/doubleverify-finds-dozens-of-android-apps-a-month-showing-ads-after-calls/ #Android #MobileAds #AppSecurity #AdFraud #CyberSecurity

ICYMI: DoubleVerify finds dozens of Android apps a month showing ads after calls: Apps abuse Android's Display over other apps permission to fire ads when a call ends, then vanish from the recents list. Can pre-install scans catch them all? https://ppc.land/doubleverify-finds-dozens-of-android-apps-a-month-showing-ads-after-calls/ #Android #MobileAds #AppSecurity #AdFraud #CyberSecurity

Samsung bans proxy SDKs as a quarter of Tizen apps route strangers' traffic: Mnemonic found Bright Data code inside an Editor's Choice Pac-Man game, and 42% of LG apps carry similar SDKs. CTV buyers now face a new invalid-traffic vector. https://ppc.land/samsung-bans-proxy-sdks-as-a-quarter-of-tizen-apps-route-strangers-traffic/ #Samsung #Tizen #ProxySDKs #AppSecurity #InvalidTraffic

Samsung bans proxy SDKs as a quarter of Tizen apps route strangers' traffic: Mnemonic found Bright Data code inside an Editor's Choice Pac-Man game, and 42% of LG apps carry similar SDKs. CTV buyers now face a new invalid-traffic vector. https://ppc.land/samsung-bans-proxy-sdks-as-a-quarter-of-tizen-apps-route-strangers-traffic/ #Samsung #Tizen #ProxySDKs #AppSecurity #InvalidTraffic

@percepticon @clemensg Die offizielle Gebets-App des Papstes (Click to Pray) soll monatelang die Daten von rund 720.000 Nutzer:innen preisgegeben haben: Namen, E-Mail-Adressen und Herkunftsland waren laut Sicherheitsforscher über eine simple Schwachstelle (IDOR) abrufbar. Besonders brisant: Der Fehler wurde bereits Anfang Januar gemeldet – eine Reaktion blieb offenbar aus, und die Lücke war bei Veröffentlichung des Berichts noch offen. Bereits 2019 war die App wegen gravierender Sicherheitsmängel aufgefallen. Sensible Anwendungen brauchen Sicherheitsprüfungen – nicht nur gute Absichten.

#Datenschutz #ITSecurity #Cybersecurity #Papst #ClickToPray #AppSecurity #IDOR

@percepticon @clemensg Die offizielle Gebets-App des Papstes (Click to Pray) soll monatelang die Daten von rund 720.000 Nutzer:innen preisgegeben haben: Namen, E-Mail-Adressen und Herkunftsland waren laut Sicherheitsforscher über eine simple Schwachstelle (IDOR) abrufbar. Besonders brisant: Der Fehler wurde bereits Anfang Januar gemeldet – eine Reaktion blieb offenbar aus, und die Lücke war bei Veröffentlichung des Berichts noch offen. Bereits 2019 war die App wegen gravierender Sicherheitsmängel aufgefallen. Sensible Anwendungen brauchen Sicherheitsprüfungen – nicht nur gute Absichten.

#Datenschutz #ITSecurity #Cybersecurity #Papst #ClickToPray #AppSecurity #IDOR

@percepticon @clemensg Die offizielle Gebets-App des Papstes (Click to Pray) soll monatelang die Daten von rund 720.000 Nutzer:innen preisgegeben haben: Namen, E-Mail-Adressen und Herkunftsland waren laut Sicherheitsforscher über eine simple Schwachstelle (IDOR) abrufbar. Besonders brisant: Der Fehler wurde bereits Anfang Januar gemeldet – eine Reaktion blieb offenbar aus, und die Lücke war bei Veröffentlichung des Berichts noch offen. Bereits 2019 war die App wegen gravierender Sicherheitsmängel aufgefallen. Sensible Anwendungen brauchen Sicherheitsprüfungen – nicht nur gute Absichten.

#Datenschutz #ITSecurity #Cybersecurity #Papst #ClickToPray #AppSecurity #IDOR

Loupe, an open-source iOS/iPadOS app by Mysk, exposes real device fingerprinting signals—passive, permissioned, and advanced—so users can see what apps can quietly read. Nothing leaves the device unless exported. Explore the code: https://github.com/mysk-research/loupe 🔍📱 #Privacy #iOS #AppSecurity

Loupe, an open-source iOS/iPadOS app by Mysk, exposes real device fingerprinting signals—passive, permissioned, and advanced—so users can see what apps can quietly read. Nothing leaves the device unless exported. Explore the code: https://github.com/mysk-research/loupe 🔍📱 #Privacy #iOS #AppSecurity

Loupe, an open-source iOS/iPadOS app by Mysk, exposes real device fingerprinting signals—passive, permissioned, and advanced—so users can see what apps can quietly read. Nothing leaves the device unless exported. Explore the code: https://github.com/mysk-research/loupe 🔍📱 #Privacy #iOS #AppSecurity

See you all tomorrow at our meetup!

This month's meetup we have Anshumaan Mishra who will talk about securing FastAPI Email WebApp while Will Lefevers shows us how the internet enables organized Cyber-crime.

Thank you to 7AI for hosting and sponsoring us this month!

#security #appsecurity #aisecurity

See you all tomorrow at our meetup!

This month's meetup we have Anshumaan Mishra who will talk about securing FastAPI Email WebApp while Will Lefevers shows us how the internet enables organized Cyber-crime.

Thank you to 7AI for hosting and sponsoring us this month!

#security #appsecurity #aisecurity

See you all tomorrow at our meetup!

This month's meetup we have Anshumaan Mishra who will talk about securing FastAPI Email WebApp while Will Lefevers shows us how the internet enables organized Cyber-crime.

Thank you to 7AI for hosting and sponsoring us this month!

#security #appsecurity #aisecurity

Last chance to RSVP for our May meetup thanks to 7AI!

This month's meetup we have Anshumaan Mishra who will talk about securing FastAPI Email WebApp while Will Lefevers shows us how the internet enables organized Cyber-crime

RSVP at - https://buff.ly/ydemfjY

#security #appsecurity #aisecurity

Last chance to RSVP for our May meetup thanks to 7AI!

This month's meetup we have Anshumaan Mishra who will talk about securing FastAPI Email WebApp while Will Lefevers shows us how the internet enables organized Cyber-crime

RSVP at - https://buff.ly/ydemfjY

#security #appsecurity #aisecurity

Last chance to RSVP for our May meetup thanks to 7AI!

This month's meetup we have Anshumaan Mishra who will talk about securing FastAPI Email WebApp while Will Lefevers shows us how the internet enables organized Cyber-crime

RSVP at - https://buff.ly/ydemfjY

#security #appsecurity #aisecurity

Thank you to 7AI for making our May meetup possible!

This month's meetup we have Anshumaan Mishra who will talk about securing FastAPI Email WebApp while Will Lefevers will show us How the internet enables organized cyber-crime

RSVP at - https://buff.ly/ydemfjY

#security #appsecurity #aisecurity

Thank you to 7AI for making our May meetup possible!

This month's meetup we have Anshumaan Mishra who will talk about securing FastAPI Email WebApp while Will Lefevers will show us How the internet enables organized cyber-crime

RSVP at - https://buff.ly/ydemfjY

#security #appsecurity #aisecurity

Thank you to 7AI for making our May meetup possible!

This month's meetup we have Anshumaan Mishra who will talk about securing FastAPI Email WebApp while Will Lefevers will show us How the internet enables organized cyber-crime

RSVP at - https://buff.ly/ydemfjY

#security #appsecurity #aisecurity

Our May meetup is full but you might just get lucky and get a spot in. Make sure to RSVP to be on the waitlist.

This month's meetup we have Anshumaan Mishra who will talk about securing FastAPI Email WebApp while Will Lefevers will show us how the internet enabled organized crime.

Thank you to 7AI for hosting and sponsoring us this month!

RSVP at - https://buff.ly/ydemfjY

#security #appsecurity #aisecurity

Our May meetup is full but you might just get lucky and get a spot in. Make sure to RSVP to be on the waitlist.

This month's meetup we have Anshumaan Mishra who will talk about securing FastAPI Email WebApp while Will Lefevers will show us how the internet enabled organized crime.

Thank you to 7AI for hosting and sponsoring us this month!

RSVP at - https://buff.ly/ydemfjY

#security #appsecurity #aisecurity

Our May meetup is full but you might just get lucky and get a spot in. Make sure to RSVP to be on the waitlist.

This month's meetup we have Anshumaan Mishra who will talk about securing FastAPI Email WebApp while Will Lefevers will show us how the internet enabled organized crime.

Thank you to 7AI for hosting and sponsoring us this month!

RSVP at - https://buff.ly/ydemfjY

#security #appsecurity #aisecurity

Struggling with slow and insecure mobile apps?
Discover our latest blog to know how modernizing legacy systems can significantly improve performance, strengthen security, and future-proof your applications.

https://medium.com/@vaibhavvsharmaa/how-modernizing-legacy-systems-improves-mobile-app-security-and-performance-f62d5c2aa9f0

#MobileAppDevelopment #AppSecurity #LegacySystemModernization #DigitalTransformation #TechUpgrade #AppPerformance #ModernApps

OpenAI Disrupts macOS App Signing Process After Supply Chain Breach

OpenAI recently took swift action to protect its users by revoking a macOS app certificate after discovering a malicious library had been downloaded through a GitHub Actions workflow used to sign its applications. This move highlights the vulnerability of even trusted software signing processes to supply chain breaches, and the…

https://osintsights.com/openai-disrupts-macos-app-signing-process-after-supply-chain-breach?utm_source=mastodon&utm_medium=social

#SupplyChain #Macos #AppSecurity #CertificateRevocation #GithubActions

🔐 Android is rolling out Developer Verification for all devs

✔️ Verified identities required
✔️ Safer app ecosystem
✔️ Still supports sideloading (with warnings)

A big move toward trust without losing openness 👇
https://android-developers.googleblog.com/2026/03/android-developer-verification-rolling-out-to-all-developers.html

#Android #AndroidDev #AppSecurity #MobileDev

🤔 Oh, look! The #hackers have beaten the White House to the punch by reverse engineering their "super secure" app, revealing shocking, yet unsurprising, details: cookie tricks, GPS stalking, and #GitHub shenanigans. 🙄 And all wrapped up with a WordPress backend – because who needs national security when you have a blog to run? 😂
https://thereallo.dev/blog/decompiling-the-white-house-app #WhiteHouse #cybersecurity #reverseengineering #appsecurity #HackerNews #ngated

🤔 Oh, look! The #hackers have beaten the White House to the punch by reverse engineering their "super secure" app, revealing shocking, yet unsurprising, details: cookie tricks, GPS stalking, and #GitHub shenanigans. 🙄 And all wrapped up with a WordPress backend – because who needs national security when you have a blog to run? 😂
https://thereallo.dev/blog/decompiling-the-white-house-app #WhiteHouse #cybersecurity #reverseengineering #appsecurity #HackerNews #ngated

🤔 Oh, look! The #hackers have beaten the White House to the punch by reverse engineering their "super secure" app, revealing shocking, yet unsurprising, details: cookie tricks, GPS stalking, and #GitHub shenanigans. 🙄 And all wrapped up with a WordPress backend – because who needs national security when you have a blog to run? 😂
https://thereallo.dev/blog/decompiling-the-white-house-app #WhiteHouse #cybersecurity #reverseengineering #appsecurity #HackerNews #ngated

What does 'we protect your data' actually mean?

Most companies: a policy.
We literally cannot read yours: that's math, not a promise.

Our engineers see encrypted blobs. Nothing more. AES-256-GCM, key never leaves your device.

https://wiggwigg.ca/en/security/application-security/

#ZeroKnowledge #Privacy #InfoSec #Fediverse #CanadianTech #PrivacyCanada #IndieWeb #PasswordManager #Encryption #AppSecurity

1/3

Android is rolling out a new security system 🔒 for sideloading that includes developer verification, mandatory wait times, and device restarts. The goal? Disrupting scam tactics while keeping the platform open. Here's how the new flow actually works and what it means for users wanting to install apps outside official stores 📱

Read the article to learn more: https://true-tech.net/android-sideloading-security-update-2026/

#Android #Cybersecurity #Sideloading #AppSecurity #MobileSecurity

https://true-tech.net/android-sideloading-security-update-2026/

Android is rolling out a new security system 🔒 for sideloading that includes developer verification, mandatory wait times, and device restarts. The goal? Disrupting scam tactics while keeping the platform open. Here's how the new flow actually works and what it means for users wanting to install apps outside official stores 📱

Read the article to learn more: https://true-tech.net/android-sideloading-security-update-2026/

#Android #Cybersecurity #Sideloading #AppSecurity #MobileSecurity

https://true-tech.net/android-sideloading-security-update-2026/

Android is rolling out a new security system 🔒 for sideloading that includes developer verification, mandatory wait times, and device restarts. The goal? Disrupting scam tactics while keeping the platform open. Here's how the new flow actually works and what it means for users wanting to install apps outside official stores 📱

Read the article to learn more: https://true-tech.net/android-sideloading-security-update-2026/

#Android #Cybersecurity #Sideloading #AppSecurity #MobileSecurity

https://true-tech.net/android-sideloading-security-update-2026/

Google comienza a señalar a las «apps vampiro» – La Play Store ya muestra advertencias de alto consumo de batería

Se acabó el anonimato para las aplicaciones mal optimizadas. Tal como se anunció a finales de 2025, Google ha comenzado a implementar este 5 de marzo de 2026 una de las funciones más esperadas por los usuarios: avisos visuales directos en la Play Store que alertan si una aplicación consume más batería de lo normal debido a una actividad excesiva en segundo plano (Fuente Google).

Esta medida, busca presionar a los desarrolladores para que optimicen sus creaciones y ofrecer transparencia total a los usuarios antes de que pulsen el botón de instalar.

¿Cómo funciona la advertencia?

La alerta aparece en un cuadro destacado justo debajo de la calificación por estrellas y los datos de descarga de la aplicación. El mensaje es claro: “Esta aplicación puede usar más batería de lo esperado debido a una alta actividad en segundo plano”.

Este aviso no es aleatorio, sino que se basa en métricas técnicas estrictas recogidas por Android Vitals:

• El umbral del «Wake Lock»: Google penaliza a las apps que mantienen el procesador encendido (mediante partial wake locks) durante más de dos horas acumuladas en un periodo de 24 horas mientras la pantalla está apagada.
• Consistencia en el mal comportamiento: La advertencia solo aparece si el 5% de las sesiones de usuario de esa app superan dicho límite de consumo en los últimos 28 días.

Castigo doble: Menos visibilidad y advertencias rojas

Las aplicaciones que superen estos umbrales de «mala conducta» no solo recibirán el distintivo de advertencia, sino que también sufrirán en su posicionamiento:

1. Exclusión de recomendaciones: Las apps identificadas como «vampiras de batería» dejarán de aparecer en las listas de recomendaciones y sugerencias de la Play Store.
2. Impacto en búsquedas: Google reducirá su visibilidad en los resultados de búsqueda, priorizando alternativas que demuestren ser más eficientes energéticamente.

Colaboración con Samsung

Un dato relevante es que este nuevo sistema de medición ha sido desarrollado en conjunto con Samsung. El gigante coreano aportó datos del mundo real sobre la experiencia de sus usuarios con el drenaje de batería, ayudando a Google a ajustar los algoritmos para que la advertencia sea lo más precisa posible y no castigue injustamente a apps que necesitan procesos de fondo legítimos (como reproductores de música o navegadores GPS).

¿Qué deben hacer los desarrolladores?

Para eliminar este «sello de la vergüenza», los desarrolladores deberán auditar sus procesos de fondo y reducir el uso innecesario de energía. Google ha proporcionado nuevas herramientas de depuración para que puedan identificar exactamente qué proceso está impidiendo que el teléfono entre en modo de suspensión (deep sleep).

Con esta actualización, Google da un paso definitivo para resolver una de las quejas históricas de Android: la variabilidad en la duración de la batería causada por aplicaciones de terceros que «secuestran» los recursos del sistema sin que el usuario se dé cuenta.

HSBC blocks its app due to F-Droid-installed Bitwarden

https://mastodon.neilzone.co.uk/@neil/115807834298031971

#HackerNews #HSBC #Bitwarden #F-Droid #AppSecurity #MobileBanking

HSBC blocks its app due to F-Droid-installed Bitwarden

https://mastodon.neilzone.co.uk/@neil/115807834298031971

#HackerNews #HSBC #Bitwarden #F-Droid #AppSecurity #MobileBanking

Australia’s Under-16 Social Media Ban Begins Dec 10 - Major Compliance + Privacy Impact

https://www.technadu.com/australia-social-media-ban-age-verification-and-privacy-rules/615237/

Platforms will face $49.5M AUD penalties if they fail to enforce age checks. Verification pathways include biometrics, government IDs, financial details, and behavior-tracking signals. Experts highlight the privacy implications of scaling such data collection across multiple platforms.

VPN-based workarounds are expected - but may expose young users to malicious apps or shady operators.

#Australia #AgeVerification #Privacy #ChildSafety #Cybersecurity #AppSecurity #TechPolicy

Australia’s Under-16 Social Media Ban Begins Dec 10 - Major Compliance + Privacy Impact

https://www.technadu.com/australia-social-media-ban-age-verification-and-privacy-rules/615237/

Platforms will face $49.5M AUD penalties if they fail to enforce age checks. Verification pathways include biometrics, government IDs, financial details, and behavior-tracking signals. Experts highlight the privacy implications of scaling such data collection across multiple platforms.

VPN-based workarounds are expected - but may expose young users to malicious apps or shady operators.

#Australia #AgeVerification #Privacy #ChildSafety #Cybersecurity #AppSecurity #TechPolicy

Did anyone notice that the #Powershell 7.5.4.0 msi installer, as referred to by Microsoft, is flagged as a #trojan by 1 Vendor on Virustotal[.]com ?
Is this a false positive?
#Cybersecurity #malware #IT #AppSecurity #Rat

Did anyone notice that the #Powershell 7.5.4.0 msi installer, as referred to by Microsoft, is flagged as a #trojan by 1 Vendor on Virustotal[.]com ?
Is this a false positive?
#Cybersecurity #malware #IT #AppSecurity #Rat

Google is enabling sideloading of unverified apps for advanced users soon! 🚀🔓 This move opens new possibilities but also calls for caution with app security. Stay informed and explore new Android flexibility! 📱⚠️ #Google #Android #Sideloading #AppSecurity https://www.heise.de/news/Google-Unverifizierte-Apps-bald-per-Sideloading-fuer-erfahrene-Nutzer-11076803.html

Google is enabling sideloading of unverified apps for advanced users soon! 🚀🔓 This move opens new possibilities but also calls for caution with app security. Stay informed and explore new Android flexibility! 📱⚠️ #Google #Android #Sideloading #AppSecurity https://www.heise.de/news/Google-Unverifizierte-Apps-bald-per-Sideloading-fuer-erfahrene-Nutzer-11076803.html

https://winbuzzer.com/2025/11/13/google-eases-android-sideloading-rules-after-developer-backlash-xcxwbn

Google Eases Android Sideloading Rules After Developer Backlash

#Google #Android #Sideloading #Devs #OpenSource #AndroidDev #KeepAndroidOpen #AppSecurity #BigTech #SoftwareDevelopment #Alphabet

https://winbuzzer.com/2025/11/13/google-eases-android-sideloading-rules-after-developer-backlash-xcxwbn

Google Eases Android Sideloading Rules After Developer Backlash

#Google #Android #Sideloading #Devs #OpenSource #AndroidDev #KeepAndroidOpen #AppSecurity #BigTech #SoftwareDevelopment #Alphabet

🔒 Verify app authenticity effortlessly with AppVerifier! This powerful tool checks app signing certificate hashes to ensure your apps are genuine and secure. Perfect for Android users who value safety and trust. 💪🔐 #AppSecurity #Android #TechSafety #OpenSource

Explore more: https://github.com/soupslurpr/AppVerifier

🔒 Verify app authenticity effortlessly with AppVerifier! This powerful tool checks app signing certificate hashes to ensure your apps are genuine and secure. Perfect for Android users who value safety and trust. 💪🔐 #AppSecurity #Android #TechSafety #OpenSource

Explore more: https://github.com/soupslurpr/AppVerifier

NowSecure was featured in Help Net Security’s Infosec Products of the Month! 🔐 The new NowSecure Privacy offering helps teams find and fix mobile app #privacy risks fast - keeping data safe and compliant: https://loom.ly/ECgO2TQ

#AppPrivacy #AppSecurity #MobileSecurity

Neon, the app that *paid* for your call recordings, is now disabled thanks to a security flaw. Yet, it's still a top-downloaded iOS app. Paying for your data *and* exposing it? Now that's what I call a value proposition! What's the sketchiest app you've willingly given your data to? #AppSecurity #PrivacyFail #iOS #TechNews #DataPrivacy
https://www.cnet.com/tech/services-and-software/neon-the-popular-free-app-that-pays-for-your-call-recordings-has-been-disabled/#ftag=CAD590a51e

🔒🚀 Un super retour d’expérience d’Amadeus à Riviera DEV 🌴

- Comment activer la sécurité dès les premières étapes du développement,
- Automatiser la validation OAuth2 dans la CI grâce aux mocks #Microcks,
- Garantir la sécurité de bout en bout des applications,
- Et surtout, impliquer les développeurs dans une véritable approche #DevSecOps.

👉 https://www.youtube.com/watch?v=kBYEwd1Zpz8&t=0s

Un bel exemple concret d’intégration sécurité + dev dans la vie réelle 💡

#CloudNative #OAuth2 #CI #AppSecurity #CNCF

Google to verify all Android developers by Sept 2026, closing loopholes in sideloading & third-party stores to boost security & accountability.

#Google #Android #AppSecurity #Developers #PlayStore #TECHi

Read Full Article Here :- https://www.techi.com/google-verifies-android-developers-to-curb-malicious-apps/