Mac and iOS apps stealing user data — an enterprise take

Credit to Author: Jonny Evans| Date: Mon, 10 Sep 2018 04:53:00 -0700

Reports claiming numerous apps distributed through Apple’s App Store are secretly exfiltrating user data should be an alarm call to enterprise CIOs. It signals a new battlefront in the eternal enterprise security wars.

The enterprise risk of personal data

On the surface, the data being extracted is kind of … personal, such as location and browser histories. Information like that provides additional insight into what individual users are up to. Why should that concern an enterprise?

That’s a rhetorical question, of course. Most enterprise security professionals recognize that any form of data exfiltration poses an overall challenge.

To read this article in full, please click here

Read more

Mac and iOS apps stealing user data, an enterprise take

Credit to Author: Jonny Evans| Date: Mon, 10 Sep 2018 04:53:00 -0700

Reports claiming numerous apps distributed through Apple’s App Store are secretly exfiltrating user data should be an alarm call to enterprise CIOs. It signals a new battlefront in the eternal enterprise security wars.

The enterprise risk of personal data

On the surface, the data being extracted is kind of… personal: Location, browser histories, information like this provides additional insight into what individual users are up to. Why should that concern an enterprise?

That’s a rhetorical question, of course. Most enterprise security professionals recognize that any form of data exfiltration poses an overall challenge.

To read this article in full, please click here

Read more

Mac App Store apps are stealing user data

Credit to Author: Thomas Reed| Date: Fri, 07 Sep 2018 17:08:24 +0000

There are several apps in the Mac App Store that are collecting data about users that they should not be collecting. Here’s what you need to know.

Categories:

Tags:

(Read more…)

The post Mac App Store apps are stealing user data appeared first on Malwarebytes Labs.

Read more

Fortnite’s Google Play rebuff sparks security concerns for Android users

Credit to Author: Christopher Boyd| Date: Thu, 06 Sep 2018 15:00:00 +0000

We take a look at what’s going with gaming juggernaut Fortnite’s decision to snub the Google Play store, why allowing installs from unknown sources on Android is a bad idea, and what the future might bring if such a setup ever catches on.

Categories:

Tags:

(Read more…)

The post Fortnite’s Google Play rebuff sparks security concerns for Android users appeared first on Malwarebytes Labs.

Read more

A week in security (August 27 – September 2)

Credit to Author: Malwarebytes Labs| Date: Mon, 03 Sep 2018 15:00:36 +0000

A round-up of the security news from August 27 – September 2, including ransomware, interesting talks during BlackHat, botnets, and the evils of JavaScript.

Categories:

Tags:

(Read more…)

The post A week in security (August 27 – September 2) appeared first on Malwarebytes Labs.

Read more

Apple insists developers ramp up their privacy commitments

Credit to Author: Jonny Evans| Date: Fri, 31 Aug 2018 06:45:00 -0700

Apple recently told the U.S. Congress that is sees customer privacy as a “human right”, though the explanation didn’t at that time extend to how third-party developers treat data they get from iOS apps. Now it does.

Privacy for the rest of us

Starting October 3, Apple will insist that all third-party apps (including new apps and app updates) submitted to the App Store include a link to the app developer’s own privacy policy.

This is a big change as until now only subscription-based apps needed to supply this information – and it also extends to the privacy policy itself, which Apple insists must be clear and explicitly in explaining:

To read this article in full, please click here

Read more

Mobile Menace Monday: FakeGift is the gift that keeps on frustrating

Credit to Author: Nathan Collier| Date: Mon, 27 Aug 2018 20:29:05 +0000

Last spring, we found yet another piece of riskware on Google Play we call Android/PUP.Riskware.FakeGift. FakeGift does exactly what its name implies: gives its users fake gifts that can be redeemed for…absolutely nothing.

Categories:

Tags:

(Read more…)

The post Mobile Menace Monday: FakeGift is the gift that keeps on frustrating appeared first on Malwarebytes Labs.

Read more