Researchers found that mobile applications contain keys that could provide access to both user information and private files from unconnected apps.
. Now, new research is shedding light on systemic oversights in mobile app cloud infrastructure that are all too common and create the risk that users' data could leak where it shouldn't or be compromised.
All of this means that if an attacker discovered these access tokens, they could potentially unlock massive and disparate troves of sensitive data all by finding one key under one doormat. The researchers found 1,859 publicly available apps on both Android and iOS that contained hard-coded Amazon Web Services credentials. The vast majority were iOS apps, a discrepancy Symantec says it has tracked for years but hasn't fully explained. The credentials present in more than three-quarters of the apps granted access to private cloud services, and nearly half of those additionally gave access to private files.
Symantec says it has notified the developers of the apps where it sees the most pressing issues and hopes to raise awareness about how insecure development practices and shared resources can create exposures without careful consideration and segmentation.
France Dernières Nouvelles, France Actualités
Similar News:Vous pouvez également lire des articles d'actualité similaires à celui-ci que nous avons collectés auprès d'autres sources d'information.
School devices are sharing your family’s data, but you can stop themEducational apps and devices lare a surprisingly lucrative source of data for advertisers. Built-in tools can help keep your family's data private.
Lire la suite »
Tech tool offers police 'mass surveillance on a budget.' It's raising 4th Amendment questions.Police in the U.S. have been using data gathered from apps like Starbucks and Waze to track people's whereabouts — at times without a search warrant.
Lire la suite »
These Are Most Hated Crypto Apps Around the WorldThese are the most universally disliked cryptocurrency apps in the world, according to data published by Electronics Hub
Lire la suite »
DeepConsensus improves the accuracy of sequences with a gap-aware sequence transformer - Nature BiotechnologyDeepConsensus improves the accuracy of sequences with a gap-aware sequence transformer
Lire la suite »
Trump's Top-Secret Document Stash RevealedA photo in a court filing Tuesday revealed a trove of classified documents discovered in Trump's Mar-a-Lago office.
Lire la suite »