Endpoint April 15, 2015 Hiding Behind Android Runtime 4 min read - I recently gave a presentation at Black Hat Asia in Singapore. My talk discussed possible ways to create user-mode rootkits in the new Android Runtime.
Endpoint March 17, 2015 Android for Work Rewraps Lollipop for Business Security 3 min read - Android for Work is offering a sweeter choice than the sour taste of fragmentation when it comes to business security and device management.
Endpoint March 12, 2015 MazelTov! More Android Malware Coming to a Mobile Device Near You 4 min read - IBM Security Trusteer's threat intelligence team recently uncovered a new type of Android malware-spreading kit dubbed "MazelTov" by its creators.
Software Vulnerabilities March 11, 2015 DroppedIn: Remotely Exploitable Vulnerability in the Dropbox SDK for Android 8 min read - IBM X-Force has discovered a vulnerability in Dropbox SDK for Android that lets attackers connect mobile apps to Dropbox accounts that they control.
March 10, 2015 Malware Calling: WhatsApp Feature Leveraged by Scammers 2 min read - A limited-time WhatsApp calling feature offer is actually a cybercriminal scam that works to trick unsuspecting users into downloading malware.
March 9, 2015 Android Users Infected With Gazon Mobile Malware Via Phony Amazon Gift Card Scheme 2 min read - Android smartphones are being hit with text messages promising an Amazon gift card, but it's really a way for cybercriminals to install mobile malware.
Software Vulnerabilities February 28, 2015 IBM Application Security on Cloud Saves the Day 2 min read - With AppScan Mobile Analyzer, IBM found vulnerabilities in the Apache Cordova framework for mobile apps that enabled a remote drive-by exploitation attack.
February 26, 2015 Android Malware Hijacks Phone Shutdown Routine 2 min read - An Android malware tool fakes the phone shutdown process to steal data, demonstrating the threats that accompany downloading apps from third-party stores.
Intelligence & Analytics February 9, 2015 Do We Need New Security Tools for the IoT? 3 min read - As the IoT becomes more prevalent, enterprises must improve their mobile device protection programs by strengthening their security controls.
January 29, 2015 Google Says Patching Older Android WebView Versions Too Difficult 3 min read - According to Google, patching older Android WebView versions is too difficult because of the sheer amount of code involved in such patches.