NowSecure
Deliver Secure Mobile Apps Faster
- Website
- nowsecure.com · all feeds from this site
- Feed URL
https://www.nowsecure.com/feed/
Read it in your FeedListing reader
Or add to: Feedly Inoreader Raw feed
Latest posts
-
Certificate Pinning for Mobile Apps: Lessons from the eMudhra CA Incident
eMudhra CA issued eight intermediate certificates whose private keys anyone could derive, and the flaw went undiscovered until October 2026. Here is how pinning your vetted root CAs narrows a mobile app’s trust store when CRL, OCSP and Certificate Transparency come after…
-
PHP2Shell: AI Speeds Up Exploits. Patch the Backends Behind Your Mobile Apps.
AI helped researchers turn two critical PHP flaws into working exploits. A fully patched mobile app can still put users at risk if it talks to a vulnerable backend. Here is how to find those connections and fix them. The post PHP2Shell: AI Speeds Up Exploits. Patch the Backends…
-
Security Through Binary Patching
Fixing critical PHP CVEs with radare2, without recompiling or waiting for distro updates. The post Security Through Binary Patching appeared first on NowSecure .
-
97% of Mobile Apps Show No Post-Quantum Cryptography. Start Your Inventory Now.
NowSecure found no detectable PQC code in 97% of 136,711 mobile apps. Learn how to inventory mobile cryptography and build a PQC migration plan. The post 97% of Mobile Apps Show No Post-Quantum Cryptography. Start Your Inventory Now. appeared first on NowSecure .
-
Most of Your Mobile Codebase Isn’t Yours. Are You Testing It Like It Is?
NowSecure's 2026 Mobile App Risk Management Survey found that 68% of organizations report having more than half their mobile codebase built from third-party SDKs. For most teams, the majority of what ships in their app is code they didn't write, and mobile app security testing…
-
Cybersecurity Awareness Month 2026: 7 Mobile App Security Realities You Can No Longer Ignore
Cybersecurity Awareness Month usually brings a familiar set of reminders: strengthen passwords, turn on multifactor authentication, update software and watch for phishing. Each helps. None goes far enough for organizations whose customers, employees and revenue increasingly…
-
How to Use OWASP MASWE and MASTG for Mobile App Security Testing
OWASP’s MASWE v1 and MASTG v2 give mobile app security teams more consistent ways to describe weaknesses and test Android and iOS apps. In a recent webinar, NowSecure Distinguished Research Engineer and OWASP MAS project co-chair Carlos Holguera walked through the updates with…
-
JNUC 2026: Bringing Mobile Apps into the AI Governance Conversation
If your team manages Apple devices, AI governance has likely become part of the job. Jamf admins are developing policies for the AI tools and agents appearing on managed endpoints, and Jamf Nation User Conference (JNUC) 2026 reflects that shift with sessions on agentic…
-
NowSecure Platform Delivers Day-One iOS 27 Security Testing
Building a robust mobile application risk management program requires defining clear business impact tiers and rigorously assessing apps against them. iOS 27 raises the stakes on that work: Apple rebuilt Siri on a new foundation model and gave it the ability to call into…
-
We Asked AI to Predict Our Mobile App Security Survey. The Gaps Are the Real Story.
Before NowSecure fielded its 2026 Mobile App Risk Management (MARM) Survey, we ran an experiment most survey research skips. We asked three leading AI models, Claude Sonnet, ChatGPT and Gemini, to predict how senior mobile application security leaders would answer the survey.…