By: Zuk Avraham, Joshua Drake, Yaniv Karta, Jimmy Shah (To download the detailed report, click here) Recently, Verizon published a report that says that malware on mobile is not an issue. We strongly suggest Verizon and other enterprises not underestimate the scale of one percent. The sheer number of mobile […]
All posts by Jon Paterson
Posts by Jon Paterson:
Apple patches major security vulnerabilities in the watchOS
Is the Apple Watch secure? While everyone is tuned in to WWDC 2015, waiting for the latest moves and releases from San Francisco, there are those of us whose first reaction is to see, and sometimes find, the potential security vulnerabilities that come with each new iOS and gadget. The […]
Telegram App Store Secret-Chat Messages in Plain-Text Database
EDIT: The following post * was not on a rooted or jailbroken device *. In order to access the plain-text secret-chat database containing the messages, we used our implementation of CVE-2014-3153. The claims that the device is rooted / jailbroken are incorrect and misleading. I will start by quoting CryptoFail […]
No Patch to Same Origin Policy (SOP) Bypass in Old Android Devices
By: Zuk Avraham and Rachel Ackerly Is Google abandoning their customers? A recent policy change at Google to stop producing security updates for Android 4.3 or older could jeopardize roughly 930 million Android users. This translates into about 60% of all Android users, many who would never realize they were […]
Is Your Mobile Device Putting Your Company at Risk?
The Three Ways Your Mobile Device is Putting Your Company at Risk The explosion of mobile devices has changed the way people live and work. Enterprises want to take advantage of the productivity benefits mobile devices present without compromising an organization’s sensitive IP. With more business being conducted on the […]
Welcoming Shridhar Mittal to the Z family
Earlier this year I promised big changes at Zimperium. We announced our Series A funding, launched Zimperium Mobile Threat Defense system with the World’s first Mobile IPS, and most recently made zANTI2 our award-winning mobile assessment tool completely free for community usage. Well, I’m excited to say that we have […]
JPMorgan Hacked: Wake Up Call For Enterprises to Secure Endpoints
Why $250 million didn’t protect JPMorgan from hackers… Late last month CBS Nightly News reported about a robbery at American’s biggest bank, JPMorgan. This attack was no ordinary hold-up. JP Morgan Chase fell victim to a targeted cyberattack, despite spending $250 million dollars on cybersecurity. According to the information disclosed […]
zANTI 2.0 Released – Completely free (no credit required)
After 3 years of work, we are excited to release zANTI 2.0 – completely free for community usage. Android Network Toolkit (zANTI 2.0) is an award-winning mobile penetration testing toolkit that enables IT Security managers and Pentesters to perform complex security audits and simulates advanced hackers’ capabilities in an organization’s […]
Security Limitations in Smartphones
In our previous blog post, we wrote about what’s planned for 2014. Since we’re aiming to change the world of mobile security, maybe a good place to start is to describe the security limitations on smart devices. Like a computer, right? Often, people think that mobile device security is exactly […]
How 2014 is going to be Z-Year
ZIMPERIUM recently announced a Series A fund-raising round of $8 Million. This will allow us to support all organizations demanding a change in current mobile security offerings; they are seeking advanced, next-generation security protection comparable to what you would expect in today’s sophisticated enterprise networks, but a solution which protects […]