SourMint: Malicious code, ad fraud, and data leak in iOS

Study finds 5,673 compromised Android signing keys on GitHub affecting over 10 billion users

This paper presents a longitudinal study on Android app signing key protection, revealing systemic risks from developer-managed credentials.

282 iOS AI Apps Leak API Keys and Open AI Proxy Access in Network Traffic Study

Rebble Team Addresses Concerns About Core Devices' Use of Their App Store Data

Team Rebble publishes a blog post expressing frustration with Core Devices for allegedly taking advantage of their work on the Rebble App St

Mac App Store Flooded with ChatGPT Copycat Apps and Lookalike Icons

The article examines the proliferation of copycat AI chat apps in the Mac App Store, comparing it to a "flea market" of counterfeit goods. T

Security Researcher Finds 16 Vulnerabilities in Lovable-Hosted App Exposing 18,000 Users' Data

A security researcher discovered 16 vulnerabilities, including 6 critical ones, in a Lovable-hosted application that exposed data of over 18

AppLovin Accused of Nonconsensual App Installs on Android Devices

Researcher Ben Edelman alleges that mobile adtech company AppLovin engages in nonconsensual app installations on Android devices without use