NowSecure #MobSec5 - Week of June 5

“The most severe of these issues is a critical security vulnerability in Media Framework that could enable a remote attacker using a specially crafted file to cause memory corruption during media file and data processing.”

“The 2017 Worldwide Developers Conference keynote was Apple’s biggest event in years, with the company introducing both new software platforms and a range of new hardware products.”

“Google removed a nasty Trojan from Google Play earlier this week that could have rooted Android devices and injected malicious code into an infected device’s system library.”

“Mobile application assessments can be useful tools for enterprises that want to strengthen mobile security policies. Here’s how to use an app assessment.”

“Cybercriminals have moved to a new level when attacking mobile devices replacing their simplistic attack methods with sophisticated and stealthier models that now use chain attacks.”

“Today, on reCAPTCHA’s tenth birthday, we’re glad to announce the first reCAPTCHA Android API as part of Google Play Services. With this API, reCAPTCHA can better tell humans and bots apart to provide a streamlined user experience on mobile.”

“As soon as the user presses ‘OK,’ the malware prompts the installation of another APK named 'Update.’ The Update app asks for administrator privileges which, if granted, can’t be revoked.”

“Exploiting CVE-2016-10277 on Moto G4 & G5 for Secure Boot Bypass.”

“As part of this initiative, the FTC is seeking general research that explores the privacy and security implications of emerging technologies, such as the Internet of Things, artificial intelligence and virtual reality.”