Security News
Facebook is suing the data analytics firm OneAudience for allegedly developing a malicious, social-media-profile-grabbing software development kit and then paying app developers to embed it in their apps. According to the complaint, OneAudience's malicious SDK swiped the data that Facebook users had agreed to share with the app - data that may have included their name, email address, the country where they logged in from, time zone, Facebook ID, and, sometimes, gender.
VMware on Tuesday advised customers using VMware Tools version 10 for Windows to update their installations to version 11 due to a local privilege escalation vulnerability. According to the virtualization giant, the repair operation in VMware Tools 10.x.y is affected by a race condition that allows an attacker who has access to the guest virtual machine to escalate their privileges.
Malicious mobile apps could be created to scrape and share profile information, email addresses and more.
Hundreds of users gave permission to these third-party apps to access their social media accounts, but the apps got more handsy than that.
Twitter and Facebook this week took action against malicious mobile software development kits (SDKs) that were used to improperly access user data. read more
Two third-party software development kits integrated by over hundreds of thousands of Android apps have been caught holding unauthorized access to users' data associated with their connected...
Researchers noticed that the main app configuration file, ADBMobileConfig.json, contained settings that could lead to security problems.
Datawallet, the company building the digital wallet for all your data, has released their developer-focused product Datawallet 3.0 — Developer Edition alongside their Developer SDK. All Datawallet...
Overall Intel patched four vulnerabilities, including high-severity flaws in its Media SDK and Intel NUC mini PC.
Google said in 2018 it tracked a rise in the number of potentially harmful apps found on Android devices that were either pre-installed or delivered via over-the-air updates.