Three in four mobile apps contain at least one vulnerability

As the internet is increasingly accessed from mobile devices, mobile apps need to be considered as part of a company's security strategy. A new report from BitSight finds that three out of four mobile applications evaluated contained at least one moderate vulnerability. It also finds material and severe vulnerabilities in some popular apps. What's also worrying is that few of these material and severe vulnerabilities get addressed once apps are in production. Problems identified in the report include Android shopping apps, which transmit personal identifying information (PII) and other sensitive fnancial details, performing poorly in TLS certifcate validation for sensitive… [Continue Reading]