Cybersecurity for Messaging Services & App Developers

Fraudsters target Nazi Android malware at Russian bank customers with phishing links

April 16, 2015

Fraudsters target Nazi Android malware at Russian bank customers with phishing links

Members of a gang of "cyber-fascist" behind Android phishing attacks have been arrested in Russia. The scam targeted customers of Russian bank Sberbank with software they called "Fifth Reich", using Nazi symbols in the management system. The cybercriminals targeted malware attacks at Android mobile devices belonging to cus...

Why Verizon’s 2015 Data Breach Investigations Report doesn’t add up, leaving consumers exposed to phishing attacks on mobile

April 15, 2015

Why Verizon’s 2015 Data Breach Investigations Report doesn’t add up, leaving consumers exposed to phishing attacks on mobile

I read an interesting post on the ComputerWorld blog by Lucian Constantin this morning - it's entitled "Web app attacks, PoS intrusions and cyberespionage top causes of data breaches". You can read the full article here. I'm writing this post to emphasize a very important point about the threat that consumers face and which, isn...

What’s missing from the 2015 McAfee Labs Threats report

April 10, 2015

What’s missing from the 2015 McAfee Labs Threats report

Millions of App Users Still Exposed to SSL Vulnerabilities Here are some of the key highlights from the report: Poor programming practices expose users to SSL/TLS vulnerabilities. Months after app vendors were notified that their apps exposed users to SSL/TLS vulnerabilities, many of those apps still remain unsecure. ...

Global EV SSL Certification Market 2015-2019 and the massive opportunity missed by security companies

April 9, 2015

Global EV SSL Certification Market 2015-2019 and the massive opportunity missed by security companies

I found this report from Research and Markets, announcing the addition of the "Global EV SSL Certification Market 2015-2019". But what it doesn't include, is the massive opportunity missed by the companies that sell EV SSL certificates. The Global EV SSL Certification market to grow at a CAGR of 32.52% over the period 2014-2...

How WebView has weakened the TCB of the Web infrastructure

April 8, 2015

Secure WebView displaying Protected by MetaCert

How WebView has weakened the TCB of the Web infrastructure

App making platforms are great. They make it easy for publishers to build native and hybrid apps. As one of the seven original founders of the W3C Mobile Web Initiative, I fully appreciate the value that these platforms bring. However, these well meaning platforms are putting consumers' personal and corporate data at risk. 1...

Russians hacked the White House thanks to a simple phishing attack

April 8, 2015

Man sitting at a computer with the word encrypted on a computer screen in front of him

Russians hacked the White House thanks to a simple phishing attack

I read about a phishing attack on the White House on PandoyDaily today. According to Pando (image above was taken from their blog post: State Department hackers conducted a phishing attack that allowed them to access a White House network that had “real-time non-public information about the president’s schedule,” among ot...

Spear phishing and how to secure a WebView

April 7, 2015

Spear phishing and how to secure a WebView

While most security reports in the media today talk about mobile malware, one security threat that's not getting as much attention as it deserves is Phishing. Phishing spreads a wide net typically through mass mailing emails that appear to be from reputable sources but actually contain links to bogus websites or that include ...

Google Safe Browsing API vs MetaCert Security API

April 2, 2015

Google Safe Browsing API vs MetaCert Security API

Until last week, MetaCert was the first and only company in the world to offer a Security API to help developers add a thin but powerful layer of security to their apps. An in-app security layer that protects consumers from malware and phishing attacks as well as unwanted content. Last week, Google announced the availability ...

Why BT is almost right with its advice about protecting your smartphone and tablet from viruses and malware

March 25, 2015

Why BT is almost right with its advice about protecting your smartphone and tablet from viruses and malware

Another article about mobile malware that fails to talk about the real security threat on mobile today. According to a recent post published by BT: Many malware threats on Windows come from infected web sites, scams spread by email and social engineering tricks - and the same applies to mobile devices. Even so, if you use y...

Leaking apps, not malware, pose greatest mobile threat to enterprises, says NowSecure CEO

March 20, 2015

Leaking apps, not malware, pose greatest mobile threat to enterprises, says NowSecure CEO

According to Andrew Hoog, CEO of NowSecure: Leaky mobile apps, not mobile malware, pose the greatest mobile threat to the enterprise, according to , a maker of mobile app security testing products. The mobile industry is mostly focused on malware. We think that is a legacy from computers….What we see driving risk in the mob...