When you travel outside your corporate network with your mobile device, you are much more vulnerable to man-in-the-middle (MitM) attacks. This is how attackers intercept data as it’s being passed from a mobile device to a server.

Of course, this is problematic for a number of reasons. CSO Online demonstrated how easy it is to steal all sorts of information from this connection, including login credentials, private data and confidential documents.

More Devices, More Problems

There are several issues at play here that are worth considering for security professionals. First, mobile endpoints are more vulnerable to these kinds of attacks, because bring-your-own-device (BYOD) policies make it harder for IT to manage devices in the corporate network. As the number of mobile devices increases, so do the potential sources of infection.

Second, because users bring their own phones and tablets to work, they feel comfortable downloading whatever applications they wish to these devices. Sometimes those apps are infected with malware. Because so many apps have been compromised, millions of users are exposed to man-in-the-middle and other attacks.

Man-in-the-Middle Attack Targets iOS Apps

Many mobile apps are vulnerable to a newly discovered man-in-the-middle attack. Earlier this year, security researcher Will Strafach reported that more than 70 different iOS apps were vulnerable to a very sophisticated type of attack involving forged Transport Layer Security (TLS) certificates. If a user downloads such an app and is on the same wireless network as an attacker, his or her mobile device could be compromised.

Since Strafach published his analysis, a few companies, such as HipChat and Foxit PDF, fixed their apps. However, most of the programs he originally identified have yet to be patched.

Sloppy Security

Finally, app developers are sometimes sloppy. It isn’t just the app that contains potential exploits — if it connects to a database, that could be a source of compromise as well. Appthority recently discovered more than 1,000 apps that could potentially leak data from unsecured servers.

Clearly, we have a long way to go to improve the security of mobile devices and the apps that run on them. Hopefully, knowing about these issues will help increase your vigilance.

More from Endpoint

Deploying Security Automation to Your Endpoints

Globally, data is growing at an exponential rate. Due to factors like information explosion and the rising interconnectivity of endpoints, data growth will only become a more pressing issue. This enormous influx of data will invariably affect security teams. Faced with an enormous amount of data to sift through, analysts are feeling the crunch. Subsequently, alert fatigue is already a problem for analysts overwhelmed with security tasks. With the continued shortage of qualified staff, organizations are looking for automation to…

Threat Management and Unified Endpoint Management

The worst of the pandemic may be behind us, but we continue to be impacted by it. School-aged kids are trying to catch up academically and socially after two years of disruption. Air travel is a mess. And all businesses have seen a spike in cyberattacks. Cyber threats increased by 81% while COVID-19 was at its peak, with 79% of all organizations experiencing a loss of business operations during that time. The risk of cyberattacks increased so much that the…

3 Ways EDR Can Stop Ransomware Attacks

Ransomware attacks are on the rise. While these activities are low-risk and high-reward for criminal groups, their consequences can devastate their target organizations. According to the 2022 Cost of a Data Breach report, the average cost of a ransomware attack is $4.54 million, without including the cost of the ransom itself. Ransomware breaches also took 49 days longer than the data breach average to identify and contain. Worse, criminals will often target the victim again, even after the ransom is…

How EDR Security Supports Defenders in a Data Breach

The cost of a data breach has reached an all-time high. It averaged $4.35 million in 2022, according to the newly published IBM Cost of a Data Breach Report. What’s more, 83% of organizations have faced more than one data breach, with just 17% saying this was their first data breach. What can organizations do about this? One solution is endpoint detection and response (EDR) software. Take a look at how an effective EDR solution can help your security teams. …