By: Zuk Avraham Follow Zuk Avraham (@ihackbanme) Nicolas Trippar Follow Nicolas Trippar (@ntrippar) Following our announcement on the N-Days Exploit Acquisition Program for smartphones, we are delighted to share the first couple of submissions. We received many submissions and we’re in the process of sharing them with ZHA followed by a public disclosure. […]
Currently browsing: Mobile Security
“Vault 7”: Nation-states have the same tools as hackers-for-hire, so what?
Yesterday, WikiLeaks published documents suggesting the CIA had access to, and developed, tools that can be used to hack smartphones and other Internet connected devices. This is not a surprise to anyone who is even remotely associated to the security industry. These kinds of tools have been in the wild […]
Financial Industry Mobile Threats: How Banking Opportunity Meets Attack Liability
Financial companies see mobility as a competitive frontier for their business, and rightfully so. A superior mobile experience now does more to differentiate a bank than 1000 physical branches. As we’ve said before, killer banking apps are valuable assets to financial institutions, as customers expect to handle almost every aspect […]
zIPS Identifies Dangerous Wi-Fi Networks with Danger Zone
Zimperium added a couple of new features and screens to zIPS today based on customer demand. Our users understand the threat that mobile devices introduce into enterprises and have used zIPS to monitor for threats on Wi-Fi, apps and OS exploits, but some asked to peek under the screens a little […]
Zimperium Wins Best Mobile Security Product for Cybersecurity Excellence Awards
We are ecstatic to win, for the second year in a row, a Cybersecurity Excellence Award. Our Mobile Threat Defense platform won for Best Mobile Security product for 2017. The Cybersecurity Excellence Award is a prestigious award that honors individuals, products and companies that demonstrate excellence, innovation and leadership in […]
Zimperium Announces Its Exploit Acquisition Program for N-Days
Your million dollar 0day just got burned and now worth nothing? No worries – we are still interested in your exploit. The value of 0days can range from a few thousands to even a million dollars for a full remote exploit chain and many companies and governments are willing to […]
Detecting Unknown Threats Time After Time
Zuk Avraham, Founder Follow Zuk Avraham (@ihackbanme) Last week, Ian Beer, from the Google Project Zero research team, released his local elevation of privileges exploit targeting iOS 10.1.1 [1]. We immediately understood that we had another opportunity to assess a new zero day exploit against our Machine-Learning attack and exploit […]
Analysis of multiple vulnerabilities in AirDroid
Reported by: Simone Margaritelli Security Researcher at Zimperium zLabs Edit: 11:02AM PDT: added exploit POC code below the disclosure timeline. Edit2: 06:01PM PDT: edited timeline to reflect 4.0.0 and 4.0.1 release dates and confirming that both versions are still vulnerable. Edit3: Dec 12th, 2016, 10:41AM PDT: edited timeline to reflect […]
SoftBank goes live with Security Checker, Powered by ZIMPERIUM™
Mobile devices are critical in today’s connected business world. Yet, very few companies have visibility into mobile platforms to identify cyberattacks, vulnerabilities and unknown threats targeting their customers’ personal data and confidential business information. Softbank gets it. As the third largest public company in Japan, SoftBank is a Japanese multinational […]
Mobile Security Is National Security
Whether deployed to steal ammo for political scandals or classified documents for military sabotage, a cyberattack on a mobile device with access to sensitive information is a matter of national security. And yet, mobile devices are often left out of the national security conversation. Obama’s recently implemented Cybersecurity National Action […]
Mobile Security Updates
Receive Zimperium proprietary research notes and vulnerability bulletins in your inbox