Expert: Mobile security to be focus in 2016

As mobile use continues to expand, security in the mobile space is becoming more important. Here is how one expert believes mobile and security will change in 2016.

iOS security will take center stage
"[Expect] more iOS kernel exploits and jailbreaks for iOS 9.2 and 9.3. We believe a vulnerability similar to Stagefright will emerge on iOS, proving no OS is safe from motivated attackers. We'll also see another Airdrop-esque attack, which will allow hackers to send and install malware on any device within range," said Zuk Avraham, Founder, Chairman & CTO, Zimperium.

Android devices will continue to have late updates

"Despite all of the criticism and pressure Android received this year following our discovery of the Stagefright vulnerability, many Android devices still aren't likely to receive timely updates in 2016. Hackers will continue to target Android and we expect more exploits to take advantage of the shared address space ASLR weakness to gain system privileges. Given the further adoption of SELinux, kernel exploits will also become more important for rooting," said Avraham.

More security breech headlines

"This is due to participation in bug bounty programs, which provide compensation and recognition to hackers who discover and report vulnerabilities in a company's security infrastructure. As companies realize the value of these programs and build the internal acumen to digest the results, more organizations will formalize these programs. Legislative changes will also push researchers toward public disclosure," said Avraham.

Read More: http://www.bizreport.com/2015/12/expert-mobile-security-to-be-focus-in-2016.html

5 mobile security flaws you should know

Windows Phone, Android, iOS — no operating system is completely bulletproof from security problems.

Mobile devices can be a scary thing to think about after major security vulnerability emerged in July in Android, called the Stagefright bug — which lets cyber criminals hack a smartphone simply by sending a text message.

A Stagefright 2.0, which allowed a hacker to gain control of a smartphone via an MP3 or MP4 video, sprang up in October before Samsung, Google, LG and other tech giants enforced monthly security smartphone security updates following the original bug, according to the Guardian.

Apple devices can also be susceptible to security problems.

A hacking team received $1 million from startup company Zerodium after the group discovered an unknown, or zero-day, vulnerability in iOS.

But such risks are not limited to just smartphones.

"I think they're in the spotlight right now because they can do so many things, and carry so much information and interfaces," said Jan Volzke, Vice President of Reputation Services at Whitepages, a contact information and identity verification company.

Here's a quick list of top mobile security flaws you should know:

Clicking on links or opening a suspicious email enables hackers to collect and access sensitive information, such as Social Security numbers and SMS messages.

They can even steal credit card numbers and online banking transactions directly and install spyware on a device to access personal data.

Experts at the Alcatel-Lucent's Motive Security Labs confirmed a rapid increase of mobile device infections, with a 25% spike in 2014, compared with 20% in 2013, according to the Motive Security Labs H2 2014 Malware Report.

Read More: http://www.nydailynews.com/news/national/5-mobile-security-flaws-article-1.2451562