Posts in "Mobile security"

Privacy vs. Security

If you think about it, practically every type of security product in the market provides security through surveillance. Surveillance is the act of keeping a close watch over someone or something in order to prevent or detect. In law enforcement it’s looking for crime but in an IT sense it’s monitoring for cyber activity. Either … Read More

Zimperium Applauds Google’s Rapid Response to Unpatched Kernel Exploit

On March 15th, Zimperium’s zIPS Mobile Threat Protection solution identified a zero-day mobile attack and its zLabs research team immediately reported the exploit to the Android Security Team. The reported attack is delivered via a publicly-available rooting application, KingRoot, using an unpatched local elevation of privilege vulnerability in the kernel reported as CVE-2015-1805. Affected devices are … Read More

Reflecting on Recent iOS and Android Security Updates

By: Zuk Avraham Follow Zuk Avraham (@ihackbanme) Joshua DrakeFollow Joshua Drake (@jduck) Nikias BassenFollow Nikias Bassen (@pimskeks) The last thirty days proven to be yet another exciting time for the mobile security ecosystem. Apple and Google released updates for their respective mobile operating systems that fix several critical issues — including some in the kernel … Read More

Video: Zimperium takes over Nexus 6 using Stagefright

Just how safe is your phone from hackers? Our own zLabs VP of Research Joshua Drake and founder and chairman Zuk Avraham sat down with Crime Watch Daily’s Ana Garcia to show viewers just how dangerous hackers abusing the Stagefright vulnerabilities can be. One of the most common ways for hackers to take over a person’s … Read More

zYiRemoval – Free tool to remove YiSpecter

By: Nikias BassenFollow Nikias Bassen (@pimskeks) An enterprise security vendor, Palo Alto Networks,  followed up on a threat discovered by Cheetah Mobile and Qihoo360, and identified a malware spreading through social media and other channels. This malware, named YiSpecter, is abusing enterprise code signing to trick the user into installing a malicious app. Following Zimperium’s … Read More