Android mental health apps with 14.7M installs filled with security flaws

Several mental health mobile apps with millions of downloads on Google Play contain security vulnerabilities that could expose users' sensitive medical information.

Millions at Risk as Android Mental Health Apps Expose Sensitive Data

Oversecured flagged 1,575 flaws in 10 Android health apps with 14.7M installs, putting chats, CBT notes, and mood logs at risk, per BleepingComputer.
InfoQ

Cilium at Ten Years: Stronger Encryption, Safer Policies, and Clearer Visibility for Large ...

Cilium 1.19 has been released, marking ten years of development for the eBPF-based networking and security project. There isn’t a flagship feature in this release; instead, it focuses on security ...

浏览器内浏览器攻击机制与Facebook凭证窃取防御研究

“浏览器内浏览器”（BitB）攻击战术的兴起，标志着网络钓鱼攻击已进入高仿真、深伪装的新阶段。通过将浏览器UI元素化、DOM化，攻击者成功绕过了用户依赖视觉校验的心理防线，使得传统的“检查URL”安全教育策略失效。针对Facebook等高风险平台的凭 ...
diginomica

How Druid is approaching agentic AI with a governance and composability mindset

Druid AI CEO Joe Kim weighs in on why the future of enterprise agents needs a governance-first mindset that supports composability and extensibility.

伪装内部通知钓鱼攻击的机制解析与零信任防御架构_邮件_员工_企业

在当前的网络威胁景观中，网络钓鱼（Phishing）依然是初始访问向量中最 prevalent 的手段之一。然而，随着企业安全意识的提升和邮件网关技术的迭代，传统的广撒网式钓鱼攻击成功率正逐年下降。为了突破这一瓶颈，攻击者开始转向更具针对性的策略，其中“伪装内部通知”成为一种新兴且极具破坏力的攻击范式。TechRadar Pro近期报道指出，一类新型钓鱼活动正通过精心伪装成企业内部消息或协作系统通 ...