Mosyle brings new iPhone, iPad endpoint security options

Mosyle is ramping up its wares with new security protections for iPhones and iPad adding more fuel to the Apple-in-the-enterprise fire.

Hardening and compliance options for iPhones and iPads

The company is unveiling its first endpoint security solution for IT admins overseeing fleets of mobile Apple devices. The idea is that the product, Mosyle Hardening and Compliance, ensures that employee devices are protected, compliant, and following the latest cybersecurity benchmarks.

To read this article in full, please click here

Read more

Do you really know what’s inside your iOS and Android apps?

It’s time to audit your code, as it appears that some no/low code features used in iOS or Android apps may not be as secure as you thought. That’s the big take away from a report explaining that disguised Russian software is being used in apps from the US Army, CDC, the UK Labour party, and other entities.

When Washington becomes Siberia

What’s at issue is that code developed by a company called Pushwoosh has been deployed within thousands of apps from thousands of entities. These include the Centers for Disease Control and Prevention (CDC), which claims it was led to believe Pushwoosh was based in Washington when the developer is, in fact, based in Siberia, Reuters explains. A visit to the Pushwoosh Twitter feed shows the company claiming to be based in Washington, DC.

To read this article in full, please click here

Read more

A week in security (October 10 – 16)

Categories: News

Tags: a week in security

Tags: week in security

Tags: AI Bill of Rights

Tags: Final Fantasy XIV

Tags: Lock and Code S03E21

Tags: Meta

Tags: WhatsApp

Tags: ransomware

Tags: tax scam

Tags: Chinese APT

Tags: Android

Tags: Chrome

Tags: iOS

Tags: managed detection response

Tags: MDR

Tags: disinformation

Tags: FBI

Tags: CISA

The most important and interesting computer security stories from the last week.

(Read more…)

The post A week in security (October 10 – 16) appeared first on Malwarebytes Labs.

Read more

Android and iOS leak some data outside VPNs

Categories: News

Tags: VPN

Tags: iOS

Tags: Android

Tags: tunnel

Tags: captive portal

Tags: leak

Tags: anonymity

“Block connections without VPN” doesn’t block all connections without a VPN and “Always on VPN” isn’t always on.

(Read more…)

The post Android and iOS leak some data outside VPNs appeared first on Malwarebytes Labs.

Read more

Jamf touts big boost to enterprise security at JNUC

Jamf opened its annual JNUC event for Apple admins today with a slew of announcements focused on device management and security, a new Jamf Trust app, further information on its recently announced ZecOps deal and other updates likely to be of interest to Apple IT professionals.

The company also committed to supporting Microsoft Device Compliance on Macs later this year, with support for Google’s context-aware zero trust framework (BeyondCorp) on iOS devices in early 2023.

To read this article in full, please click here

Read more

Sadly, IT can no longer trust geolocation for much of anything

Credit to Author: eschuman@thecontentfirm.com| Date: Fri, 16 Sep 2022 03:00:00 -0700

Geolocation was once a glorious way to know who your company is dealing with (and sometimes what they are doing). Then VPNs started to undermine that. And now, things have gotten so bad that the Apple App Store and Google Play both offer apps that unashamedly declare they can spoof locations — and neither mobile OS vendor does anything to stop it.

Why? It seems both Apple and Google created the holes these developers are using.

In a nutshell, Apple and Google — to test their apps across various geographies — needed to be able to trick the system into thinking that their developers are wherever they wanted to say that they are. What’s good for the mobile goose, as they say.

To read this article in full, please click here

Read more