Researchers found that mobile applications contain keys that could provide access to both user information and private files from unconnected apps.
. Now, new research is shedding light on systemic oversights in mobile app cloud infrastructure that are all too common and create the risk that users' data could leak where it shouldn't or be compromised.
All of this means that if an attacker discovered these access tokens, they could potentially unlock massive and disparate troves of sensitive data all by finding one key under one doormat. The researchers found 1,859 publicly available apps on both Android and iOS that contained hard-coded Amazon Web Services credentials. The vast majority were iOS apps, a discrepancy Symantec says it has tracked for years but hasn't fully explained. The credentials present in more than three-quarters of the apps granted access to private cloud services, and nearly half of those additionally gave access to private files.
Symantec says it has notified the developers of the apps where it sees the most pressing issues and hopes to raise awareness about how insecure development practices and shared resources can create exposures without careful consideration and segmentation.
Indonesia Berita Terbaru, Indonesia Berita utama
Similar News:Anda juga dapat membaca berita serupa dengan ini yang kami kumpulkan dari sumber berita lain.
School devices are sharing your family’s data, but you can stop themEducational apps and devices lare a surprisingly lucrative source of data for advertisers. Built-in tools can help keep your family's data private.
Baca lebih lajut »
Tech tool offers police 'mass surveillance on a budget.' It's raising 4th Amendment questions.Police in the U.S. have been using data gathered from apps like Starbucks and Waze to track people's whereabouts — at times without a search warrant.
Baca lebih lajut »
These Are Most Hated Crypto Apps Around the WorldThese are the most universally disliked cryptocurrency apps in the world, according to data published by Electronics Hub
Baca lebih lajut »
DeepConsensus improves the accuracy of sequences with a gap-aware sequence transformer - Nature BiotechnologyDeepConsensus improves the accuracy of sequences with a gap-aware sequence transformer
Baca lebih lajut »
Trump's Top-Secret Document Stash RevealedA photo in a court filing Tuesday revealed a trove of classified documents discovered in Trump's Mar-a-Lago office.
Baca lebih lajut »