Here at Appoov, we were wondering why there has been so little discussion about applying the...
Stay up to date on Mobile App and API Security with our Blogs
There is a trend emerging for anyone launching a consumer business. Almost every business these...
The Japanese Regulation in Context On June 12 2024 the Japanese Government passed into law the Act...
This overview outlines the development and adoption of Huawei HarmonyOS and the associated security...
Let’s talk about bots. And be a little provocative. A review of bot solutions (see previous blog)...
In case you didn't notice, the OWASP Mobile Top 10 List was just updated, for the first time since...
Posts on
- API Security (156)
- Mobile App Authentication (93)
- Mobile App Development (82)
- Mobile Security (75)
- Threats (67)
- Mobile App Security (63)
- API Abuse (62)
- Integration (54)
- API Keys (52)
- API (48)
- MitM Attack (46)
- Bots (39)
- Business (38)
- Certificate Pinning (32)
- Reverse Engineering (31)
- Quickstart (23)
- Healthcare (21)
- TLS (21)
- Android (20)
- Backend (20)
- Repackaged Apps (20)
- App Attestation (19)
- Fintech (18)
- iOS (17)
- Mobile API Security (16)
- Scrapers (14)
- Mobility (13)
- RASP (13)
- News (9)
- Zero Trust (9)
- Android Security (8)
- Fake Accounts (8)
- Run-time Secrets Protection (8)
- Third Party APIs (8)
- Gaming and Gambling (7)
- Man-in-the-Middle attack (7)
- API Gateway (6)
- Account Hijacking (6)
- ReactNative (6)
- Automotive (5)
- HarmonyOS (5)
- Mobile Health (5)
- OAuth2 (5)
- Reverse Proxy (5)
- Apple (4)
- Code Obfuscation (4)
- Google (4)
- OWASP (4)
- Retail (4)
- Aggregators (3)
- CheatingAsAService (3)
- Mobile App Distribution (3)
- SafetyNet (3)
- Token-Based API Access (3)
- Web Security (3)
- gRPC (3)
- App Store (2)
- Cloud (2)
- Cordova (2)
- Cross-Platform (2)
- Data Security (2)
- Huawei (2)
- Mobile Banking (2)
- Mobile Finance (2)
- Mobile Payment Security (2)
- Pentesting (2)
- Runtime Application Self-Protection (2)
- SDLC (2)
- AWS (1)
- Account Takeover (1)
- App Shielding (1)
- Aviation (1)
- BOLA (1)
- CNIL (1)
- Connected Cars (1)
- Credential Stuffing (1)
- DMCC (1)
- DeviceCheck (1)
- E-Commerce (1)
- Frida (1)
- Frontend (1)
- Google Play (1)
- SDK (1)
- Smartphone Act (1)
- WAAP (1)
- WAF (1)
- over-the-air updates (1)
Popular Posts
- How to Bypass Certificate Pinning with Frida on an Android App
- Revealing the Limitations of Apple DeviceCheck and Apple App Attest
- How to Extract an API Key from a Mobile App by Static Binary Analysis
- How to MitM Attack the API of an Android App
- Why Does Your Mobile App Need an API Key?
- The Limitations of Google Play Integrity API (ex SafetyNet)
- Securing HTTPS with Certificate Pinning on Android
- How Poor API Security Led to Major Breaches in 2024
- 5 Threats to Mobile Games and 5 Essential Security Measures
- Limitations of Huawei HarmonyOS Safety Detect: What You Need to Know
- How to Protect Against Certificate Pinning Bypassing
- Epic Games Won Against Google but Lost to Apple - What are the Implications?
- How to Use Code Obfuscation to Hide Secrets in Your Mobile App
- How to Ride the Bus for Free (Hackers Need Not Apply)
- Bypassing Certificate Pinning