Mobile Apps With Millions of Downloads Expose Cloud Credentials

October 23, 2024 at 11:53AM Research by Symantec reveals that several popular mobile apps expose hardcoded, unencrypted cloud service credentials, risking severe security breaches. Apps for both Android and iPhone include sensitive Amazon Web Services and Microsoft Azure credentials. This highlights the urgent need for improved security practices in mobile app development to mitigate such … Read more

AWS, Azure auth keys found in Android and iOS apps used by millions

October 22, 2024 at 04:23PM A report by Symantec reveals that numerous mobile apps for iOS and Android contain hardcoded, unencrypted cloud service credentials, risking user data exposure. This vulnerability, stemming from poor development practices, could allow unauthorized data access. Developers are urged to adopt best practices to safeguard sensitive information in apps. ### Meeting … Read more

Researchers Uncover ‘LLMjacking’ Scheme Targeting Cloud-Hosted AI Models

May 10, 2024 at 04:03AM Cybersecurity researchers have uncovered a new attack, LLMjacking, targeting cloud-hosted large language model (LLM) services. Attackers use stolen cloud credentials to access LLMs, exploiting vulnerable systems like Laravel Framework and AWS. By querying logging settings, attackers aim to evade detection while racking up substantial costs for victims. Organizations are advised … Read more